EMC Replication Manager irccd.exe RunProgram 訊息處理任意命令執行

critical Nessus Plugin ID 40849

語系：

概要

Arbitrary code can be executed on the remote host.

說明

遠端主機正在執行 EMC Replication Manager Client 控制精靈。

此軟體的遠端版本受到遠端命令執行弱點影響。

未經驗證的攻擊者可能會傳送特別製作的封包至遠端主機，藉此惡意利用此瑕疵。若惡意利用得逞，會導致遠端程式碼透過程序權限自行執行。

解決方案

Install EMC Replication Manager patch as described on the EMC support website. The following EMC products resolve this issue :

- EMC Replication Manager 5.0 SP6 Security Patch
- EMC Replication Manager 5.1 SP6 Security Patch
- EMC Replication Manager 5.2 Security Patch
- EMC Replication Manager 5.2 SP1 Security Patch