Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:RETRO-CL-BO |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
EMC Retrospect Client Crafted Packet Buffer Overflow |
Release Date |
2006/10/09 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: EMC Retrospect Client Crafted Packet Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the EMC Retrospect Client. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the system.
Extended Description
Dantz Retrospect Backup Client is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue allows remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely crash the application, denying further service to legitimate users.
Affected Products
- Dantz retrospect_client
- Dantz retrospect_client_for_linux
- Dantz retrospect_client_for_macintosh
- Dantz retrospect_client_for_netware
- Dantz retrospect_client_for_solaris
- Dantz retrospect_client_for_windows
References
- BugTraq: 17948
- CVE: CVE-2006-2391