Aaron Portnoy has reported a vulnerability in EMC RepliStor, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an input validation error in the RepliStor Server Service and can be exploited to cause a heap-based buffer overflow via a specially-crafted packet sent to default port 7144/TCP.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in 6.1.3. Other versions may also be affected.

Solution
The vendor has issued updates. Contact EMC Software Technical Support or refer to knowledge base article emc168869:
Further details available to Secunia VIM customers

Provided and/or discovered by
Aaron Portnoy, TippingPoint DVLabs

Original Advisory
TippingPoint DVLabs:
http://dvlabs.tippingpoint.com/advisory/TPTI-07-18

Deep Links
Links available to Secunia VIM customers