CVE-2009-1119
https://notcve.org/view.php?id=CVE-2009-1119
Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow. Múltiples desbordamientos de búfer basados en monticulo en EMC RepliStor v6.2 anterior a SP5 y v6.3 anterior a SP2 permite a atacantes remotos ejecutar código de su elección a través de un mensaje manipulado en (1) ctrlservice.exe o (2) rep_srv.exe, posiblemente relacionado con un desbordamiento de entero. • http://secunia.com/advisories/34699 http://www.fortiguardcenter.com/advisory/FGA-2009-13.html http://www.securityfocus.com/archive/1/502575/100/0/threaded http://www.securityfocus.com/bid/34449 http://www.securitytracker.com/id?1022026 http://www.vupen.com/english/advisories/2009/1018 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2007-5323
https://notcve.org/view.php?id=CVE-2007-5323
The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value that causes RepliStor to create a smaller buffer than expected, which triggers a buffer overflow when that buffer is used in a recv function call. El servicio RepliStor Server de EMC REplistor 6.1.3 permite a atacantes remotos ejecutar código de su elección mediante un valor de tamaño (size) que hace que RepliStor cree un búfer más pequeño de lo esperado, lo cual dispara un desbordamiento de búfer cuando ese búfer se usa en una llamada a la función recv. • http://dvlabs.tippingpoint.com/advisory/TPTI-07-18 http://secunia.com/advisories/27166 http://www.securityfocus.com/bid/26014 http://www.securitytracker.com/id?1018799 http://www.vupen.com/english/advisories/2007/3458 https://exchange.xforce.ibmcloud.com/vulnerabilities/37075 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •