CVE-2012-0406

The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

8.55% chance of exploitation in the next 30 days, 95th percentile

Published

2012-04-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18688/

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18688

References

• CVE Record
• NVD entry

Related

• CVE-2012-0394
• CVE-2012-0407
• CVE-2012-0393
• CVE-2012-0419
• CVE-2012-0392
• CVE-2012-0432