CVE-2012-0406

Published: Apr 20, 2012Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.

Affected (8)

Products: Emc: Data Protection Advisor

Emc

1 product

Data Protection Advisor

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Emc Data Protection Advisor	Version 5.5
Emc Data Protection Advisor	Version 5.5 sp1
Emc Data Protection Advisor	Version 5.6
Emc Data Protection Advisor	Version 5.6 sp1
Emc Data Protection Advisor	Version 5.7
Emc Data Protection Advisor	Version 5.7 sp1
Emc Data Protection Advisor	Version 5.8
Emc Data Protection Advisor	Version 5.8 sp1