Emc Replistor vulnerabilities

CVE-2009-1120 [CRITICAL] CVE-2009-1120: EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerabilit EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.

CVE-2009-3744 [MEDIUM] CVE-2009-3744: rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of ser rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144.

CVE-2009-1119 [CRITICAL] CWE-119 CVE-2009-1119: Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow.

CVE-2007-5323 [CRITICAL] CWE-119 CVE-2007-5323: The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary cod The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value that causes RepliStor to create a smaller buffer than expected, which triggers a buffer overflow when that buffer is used in a recv function call.

CVE-2007-6426 [HIGH] CWE-119 CVE-2007-6426: Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data.