Lucene search
DellCVE-2012-0406HistoryApr 20, 2012 - 4:02 a.m.
CVE-2012-0406
2012-04-2004:02:52
CWE-264
dell
web.nvd.nist.gov
25
cve-2012-0406
dpa
emc
data protection advisor
denial of service
remote attackers
null pointer
daemon crash
authenticateconnection command
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.1
Confidence
Low
EPSS
0.022
Percentile
89.5%
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
Affected configurations
Node
emcdata_protection_advisorMatch5.5
ORemcdata_protection_advisorMatch5.5sp1
ORemcdata_protection_advisorMatch5.6
ORemcdata_protection_advisorMatch5.6sp1
ORemcdata_protection_advisorMatch5.7
ORemcdata_protection_advisorMatch5.7sp1
ORemcdata_protection_advisorMatch5.8
ORemcdata_protection_advisorMatch5.8sp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| emc | data_protection_advisor | 5.5 | cpe:2.3:a:emc:data_protection_advisor:5.5:*:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.5 | cpe:2.3:a:emc:data_protection_advisor:5.5:sp1:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.6 | cpe:2.3:a:emc:data_protection_advisor:5.6:*:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.6 | cpe:2.3:a:emc:data_protection_advisor:5.6:sp1:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.7 | cpe:2.3:a:emc:data_protection_advisor:5.7:*:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.7 | cpe:2.3:a:emc:data_protection_advisor:5.7:sp1:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.8 | cpe:2.3:a:emc:data_protection_advisor:5.8:*:*:*:*:*:*:* |
| emc | data_protection_advisor | 5.8 | cpe:2.3:a:emc:data_protection_advisor:5.8:sp1:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-0406
2012-04-20 01:00:00
nvd
nvd
CVE-2012-0406
2012-04-20 04:02:52
prion
prion
Null pointer dereference
2012-04-20 04:02:00
exploitdb
exploitdb
EMC Data Protection Advisor 5.8.1 - Denial of Service
2012-03-31 00:00:00
openvas
openvas
securityvulns
securityvulns
EMC Data Protection Advisor security vulnerabilities
2012-04-23 00:00:00
ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities
2012-04-23 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.1
Confidence
Low
EPSS
0.022
Percentile
89.5%
Related for CVE-2012-0406