CVE-2011-0321

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-01 · updated 2026-06-16
Weakness: CWE-264

Description

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.

Affected products

EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4: through 7.5; 6.0, 6.1, 7.0, 7.2, 7.3, 7.4 (+21)

References

http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html
http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt
http://secunia.com/advisories/43113
http://securitytracker.com/id?1025010
http://www.osvdb.org/70686
http://www.securityfocus.com/bid/46044
http://www.vupen.com/english/advisories/2011/0241
https://exchange.xforce.ibmcloud.com/vulnerabilities/64997
http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html
http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt
http://secunia.com/advisories/43113
http://securitytracker.com/id?1025010

Get alerted when CVE-2011-0321 or the next vulnerability affects your stack