CVE-2012-2288
Published Sep 4, 2012
Last updated 12 years ago
Overview
- Description
- Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.
- Source
- security_alert@emc.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-134
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:networker:7.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADBD90BD-A1F7-45D6-9BD3-19AF88FD6087"
},
{
"criteria": "cpe:2.3:a:emc:networker:7.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEF6BADD-1761-4F58-8FE6-34824D36A42A"
},
{
"criteria": "cpe:2.3:a:emc:networker:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83625C74-9A2C-406D-A72F-98057C626180"
}
],
"operator": "OR"
}
]
}
]