| CVE ID | |
| CVSS SCORE | |
| AFFECTED VENDORS |
EMC OpenText OpenText |
| AFFECTED PRODUCTS |
Documentum eRoom Hummingbird Search Server |
| TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['6259']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
| VULNERABILITY DETAILS |
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Documentum eRoom, OpenText Hummingbird and OpenText Search Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hummingbird STR service (STRsvc.exe) which listens by default on TCP port 10500. The STRlib.dll module receives network packet data into a static stack buffer. By providing a large enough packet, this buffer can overflow. Exploitation allows remote attackers to execute arbitrary code under the context of the SYSTEM user. |
| ADDITIONAL DETAILS |
This issue has been resolved in EMC Documentum eRoom 7.4.2. EMC strongly recommends customers upgrade to EMC Documentum eRoom 7.4.2. More information on this can be found an powerlink.emc.com (Knowledge Base esg99041). This issue has been resolved in the latest Search Server 6.0 and 6.1 patches for all platforms. More information on the fix can be found in OpenText Knowledge Base 14816981 (login is required to access the content). |
| DISCLOSURE TIMELINE |
|
| CREDIT | Stephen Fewer of Harmony Security (www.harmonysecurity.com) |
