Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2008-6219: EMC NetWorker components can be crashed by remote memory attack
CVE-2008-6219 · published 17 years ago
Summary
Several EMC NetWorker programs, including the server, storage node, client and related modules, can run out of memory when they receive specially crafted remote requests. This can cause the affected service to stop working, disrupting backup and recovery operations. Apply the EMC patches or updates that fix the memory handling as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| emc | networker_client |
<= 7.3 <= 7.3.2 7.4 7.4.1 7.4.2 cpe:2.3:a:emc:networker_client:*:sp3:*:*:*:*:*:* |
| emc | networker_module |
<= 2.0 <= 5.1 cpe:2.3:a:emc:networker_module:*:-:meditech:*:*:*:*:* |
| emc | networker_powersnap |
<= 2.4 cpe:2.3:a:emc:networker_powersnap:*:sp1:*:*:*:*:*:* |
| emc | networker_server |
<= 7.3 7.4 7.4.1 7.4.2 cpe:2.3:a:emc:networker_server:*:sp3:*:*:*:*:*:* |
| emc | networker_storage_node |
<= 7.3 <= 7.3.2 7.4 7.4.1 7.4.2 cpe:2.3:a:emc:networker_storage_node:*:sp3:*:*:*:*:*:* |
Original advisory text
nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Mo...
nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.
References
- http://secunia.com/advisories/32383 Vendor Advisory
- http://www.fortiguardcenter.com/advisory/FGA-2008-23.html
- http://www.securityfocus.com/archive/1/497645/100/0/threaded
- http://www.securityfocus.com/archive/1/497666/100/0/threaded
- http://www.securityfocus.com/bid/31866
- http://www.securitytracker.com/id?1021095
- http://www.vupen.com/english/advisories/2008/2894
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46035
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.8
High
Type
CWE-399Resource Management Errors
Timeline
Published20 Feb 2009
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2008-6219 · NVD
Track software like this
Free during beta