EMC AlphaStor DCP Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
EMC AlphaStor 4.0
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57609
CVE (CAN) ID: CVE-2013-0930
 
AlphaStor is an application component used to manage disks.

The Device Control Program DCP in versions earlier than EMC AlphaStor 4.0 build 814 has a buffer overflow vulnerability. Remote attackers can exploit this vulnerability to execute arbitrary code by using a specially crafted device name.
 
<* Source: vendor
Aniway

Link: http://packetstormsecurity.com/files/cve/CVE-2013-0930
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
EMC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.emc.com/products/storage_management/navisphere.jsp