Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

EMC Control Center lets attackers run code remotely

CVE-2008-5419 · published 17 years ago
Summary

The SAN Manager component in EMC Control Center versions 5.2 SP5 and 6.0 can be fooled into processing overly large requests, which allows a remote user to run their own programs on the server. This could give an attacker control over your storage management system. Apply the vendor’s security update or upgrade to a newer version and restrict network access to the service.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
emc control_center 5.2
6.0
cpe:2.3:a:emc:control_center:5.2:sp5:*:*:*:*:*:*
Original advisory text
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS ...
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
8% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published10 Dec 2008
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2008-5419 · NVD
Track software like this
Free during beta