Tal Zeltzer has reported a vulnerability in EMC NetWorker Server, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in indexd.exe when processing a request containing opcode 0x1 for program 0x0005F3D9 and can be exploited to cause a stack-based buffer overflow.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 7.5.x and 7.6.x.

Solution
Update to version 7.6.3 SP1 Cumulative Release build 851.

Provided and/or discovered by
Tal Zeltzer via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
EMC:
http://archives.neohapsis.com/archives/bugtraq/2012-01/att-0164/ESA-2012-005.txt

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-025/

Deep Links
Links available in Customer Area