EMC NetWorker Remote Code Execution and Information Leakage

Release date:
Updated on:

Affected Systems:
EMC NetWorker Module for Microsoft Applications 2.3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55883
Cve id: CVE-2012-2284, CVE-2012-2290

EMC NetWorker Module for Microsoft Applications is a backup and recovery software.

EMC NetWorker Module for Microsoft Applications has multiple security vulnerabilities that allow attackers to execute arbitrary code or leak information.

<* Source: EMC Product Security Response Center
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

EMC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.emc.com/products/storage_management/navisphere.jsp