TUCoPS :: HP Unsorted E

TUCoPS :: HP Unsorted E :: va2413.htm
EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability
ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability

WkRJLTA5LTAwOTogRU1DIEF1dG9TdGFydCBCYWNrYm9uZSBFbmdpbmUgVHJ1c3RlZCBQb2ludGVy
IENvZGUgRXhlY3V0aW9uIA0KVnVsbmVyYWJpbGl0eQ0KaHR0cDovL3d3dy56ZXJvZGF5aW5pdGlh
dGl2ZS5jb20vYWR2aXNvcmllcy9aREktMDktMDA5DQpKYW51YXJ5IDIzLCAyMDA5DQoNCi0tIEFm
ZmVjdGVkIFZlbmRvcnM6DQpFTUMNCg0KLS0gQWZmZWN0ZWQgUHJvZHVjdHM6DQpFTUMgQXV0b1N0
YXJ0DQoNCi0tIFRpcHBpbmdQb2ludChUTSkgSVBTIEN1c3RvbWVyIFByb3RlY3Rpb246DQpUaXBw
aW5nUG9pbnQgSVBTIGN1c3RvbWVycyBoYXZlIGJlZW4gcHJvdGVjdGVkIGFnYWluc3QgdGhpcw0K
dnVsbmVyYWJpbGl0eSBieSBEaWdpdGFsIFZhY2NpbmUgcHJvdGVjdGlvbiBmaWx0ZXIgSUQgNjQx
Mi4gDQpGb3IgZnVydGhlciBwcm9kdWN0IGluZm9ybWF0aW9uIG9uIHRoZSBUaXBwaW5nUG9pbnQg
SVBTLCB2aXNpdDoNCg0KICAgIGh0dHA6Ly93d3cudGlwcGluZ3BvaW50LmNvbQ0KDQotLSBWdWxu
ZXJhYmlsaXR5IERldGFpbHM6DQpUaGlzIHZ1bG5lcmFiaWxpdHkgYWxsb3dzIHJlbW90ZSBhdHRh
Y2tlcnMgdG8gZXhlY3V0ZSBhcmJpdHJhcnkgY29kZSBvbg0Kc3lzdGVtcyB3aXRoIHZ1bG5lcmFi
bGUgaW5zdGFsbGF0aW9ucyBvZiBFTUMgQXV0b1N0YXJ0LiBBdXRoZW50aWNhdGlvbg0KaXMgbm90
IHJlcXVpcmVkIHRvIGV4cGxvaXQgdGhpcyB2dWxuZXJhYmlsaXR5Lg0KDQpUaGUgc3BlY2lmaWMg
ZmxhdyBleGlzdHMgd2l0aGluIHRoZSBCYWNrYm9uZSBzZXJ2aWNlIChmdGJhY2tib25lLmV4ZSkN
CndoaWNoIGxpc3RlbnMgYnkgZGVmYXVsdCBvbiBUQ1AgcG9ydCA4MDQyLiBUaGUgcHJvY2VzcyB0
cnVzdHMgYSBEV09SRA0KdmFsdWUgZnJvbSBpbmNvbWluZyBwYWNrZXRzIHdoaWNoIGl0IGFyYml0
cmFyaWx5IGNhbGxzLiBFeHBsb2l0YXRpb24gb2YNCnRoaXMgaXNzdWUgbGVhZHMgdG8gY29kZSBl
eGVjdXRpb24gdW5kZXIgdGhlIGNvbnRleHQgb2YgdGhlIFNZU1RFTQ0KdXNlci4NCg0KDQotLSBW
ZW5kb3IgUmVzcG9uc2U6DQpFTUMgc3RhdGVzOg0KQ3VzdG9tZXJzIHdobyBhcmUgdXNpbmcgb2xk
ZXIgdmVyc2lvbnMgYXJlIGFkdmlzZWQgdG8gdXBncmFkZSB0byBFTUMNCkF1dG9TdGFydCA1LjMg
U1AyDQpGb3IgRU1DIEF1dG9TdGFydCA1LjMuIFNQMiBTb2Z0d2FyZSBuYXZpZ2F0ZSB0byB0aGUg
Zm9sbG93aW5nIGxvY2F0aW9uOg0KUG93ZXJsaW5rID4gU3VwcG9ydCA+IFNvZnR3YXJlIERvd25s
b2FkcyBhbmQgTGljZW5zaW5nID4gRG93bmxvYWRzIEEtQiA+DQpBdXRvU3RhcnQNCg0KLS0gRGlz
Y2xvc3VyZSBUaW1lbGluZToNCjIwMDgtMDgtMjYgLSBWdWxuZXJhYmlsaXR5IHJlcG9ydGVkIHRv
IHZlbmRvcg0KMjAwOS0wMS0yMyAtIENvb3JkaW5hdGVkIHB1YmxpYyByZWxlYXNlIG9mIGFkdmlz
b3J5DQoNCi0tIENyZWRpdDoNClRoaXMgdnVsbmVyYWJpbGl0eSB3YXMgZGlzY292ZXJlZCBieToN
CiAgICAqIE1hbnVlbCBTYW50YW1hcmluYSBTdWFyZXoNCg0KLS0gQWJvdXQgdGhlIFplcm8gRGF5
IEluaXRpYXRpdmUgKFpESSk6DQpFc3RhYmxpc2hlZCBieSBUaXBwaW5nUG9pbnQsIFRoZSBaZXJv
IERheSBJbml0aWF0aXZlIChaREkpIHJlcHJlc2VudHMgDQphIGJlc3Qtb2YtYnJlZWQgbW9kZWwg
Zm9yIHJld2FyZGluZyBzZWN1cml0eSByZXNlYXJjaGVycyBmb3IgcmVzcG9uc2libHkNCmRpc2Ns
b3NpbmcgZGlzY292ZXJlZCB2dWxuZXJhYmlsaXRpZXMuDQoNClJlc2VhcmNoZXJzIGludGVyZXN0
ZWQgaW4gZ2V0dGluZyBwYWlkIGZvciB0aGVpciBzZWN1cml0eSByZXNlYXJjaA0KdGhyb3VnaCB0
aGUgWkRJIGNhbiBmaW5kIG1vcmUgaW5mb3JtYXRpb24gYW5kIHNpZ24tdXAgYXQ6DQoNCiAgICBo
dHRwOi8vd3d3Lnplcm9kYXlpbml0aWF0aXZlLmNvbQ0KDQpUaGUgWkRJIGlzIHVuaXF1ZSBpbiBo
b3cgdGhlIGFjcXVpcmVkIHZ1bG5lcmFiaWxpdHkgaW5mb3JtYXRpb24gaXMNCnVzZWQuIFRpcHBp
bmdQb2ludCBkb2VzIG5vdCByZS1zZWxsIHRoZSB2dWxuZXJhYmlsaXR5IGRldGFpbHMgb3IgYW55
DQpleHBsb2l0IGNvZGUuIEluc3RlYWQsIHVwb24gbm90aWZ5aW5nIHRoZSBhZmZlY3RlZCBwcm9k
dWN0IHZlbmRvciwNClRpcHBpbmdQb2ludCBwcm92aWRlcyBpdHMgY3VzdG9tZXJzIHdpdGggemVy
byBkYXkgcHJvdGVjdGlvbiB0aHJvdWdoDQppdHMgaW50cnVzaW9uIHByZXZlbnRpb24gdGVjaG5v
bG9neS4gRXhwbGljaXQgZGV0YWlscyByZWdhcmRpbmcgdGhlDQpzcGVjaWZpY3Mgb2YgdGhlIHZ1
bG5lcmFiaWxpdHkgYXJlIG5vdCBleHBvc2VkIHRvIGFueSBwYXJ0aWVzIHVudGlsDQphbiBvZmZp
Y2lhbCB2ZW5kb3IgcGF0Y2ggaXMgcHVibGljbHkgYXZhaWxhYmxlLiBGdXJ0aGVybW9yZSwgd2l0
aCB0aGUNCmFsdHJ1aXN0aWMgYWltIG9mIGhlbHBpbmcgdG8gc2VjdXJlIGEgYnJvYWRlciB1c2Vy
IGJhc2UsIFRpcHBpbmdQb2ludA0KcHJvdmlkZXMgdGhpcyB2dWxuZXJhYmlsaXR5IGluZm9ybWF0
aW9uIGNvbmZpZGVudGlhbGx5IHRvIHNlY3VyaXR5DQp2ZW5kb3JzIChpbmNsdWRpbmcgY29tcGV0
aXRvcnMpIHdobyBoYXZlIGEgdnVsbmVyYWJpbGl0eSBwcm90ZWN0aW9uIG9yDQptaXRpZ2F0aW9u
IHByb2R1Y3QuDQoNCk91ciB2dWxuZXJhYmlsaXR5IGRpc2Nsb3N1cmUgcG9saWN5IGlzIGF2YWls
YWJsZSBvbmxpbmUgYXQ6DQoNCiAgICBodHRwOi8vd3d3Lnplcm9kYXlpbml0aWF0aXZlLmNvbS9h
ZHZpc29yaWVzL2Rpc2Nsb3N1cmVfcG9saWN5Lw0KDQpDT05GSURFTlRJQUxJVFkgTk9USUNFOiBU
aGlzIGUtbWFpbCBtZXNzYWdlLCBpbmNsdWRpbmcgYW55IGF0dGFjaG1lbnRzLA0KaXMgYmVpbmcg
c2VudCBieSAzQ29tIGZvciB0aGUgc29sZSB1c2Ugb2YgdGhlIGludGVuZGVkIHJlY2lwaWVudChz
KSBhbmQNCm1heSBjb250YWluIGNvbmZpZGVudGlhbCwgcHJvcHJpZXRhcnkgYW5kL29yIHByaXZp
bGVnZWQgaW5mb3JtYXRpb24uDQpBbnkgdW5hdXRob3JpemVkIHJldmlldywgdXNlLCBkaXNjbG9z
dXJlIGFuZC9vciBkaXN0cmlidXRpb24gYnkgYW55IA0KcmVjaXBpZW50IGlzIHByb2hpYml0ZWQu
ICBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2UNCmRlbGV0ZSBh
bmQvb3IgZGVzdHJveSBhbGwgY29waWVzIG9mIHRoaXMgbWVzc2FnZSByZWdhcmRsZXNzIG9mIGZv
cm0gYW5kDQphbnkgaW5jbHVkZWQgYXR0YWNobWVudHMgYW5kIG5vdGlmeSAzQ29tIGltbWVkaWF0
ZWx5IGJ5IGNvbnRhY3RpbmcgdGhlDQpzZW5kZXIgdmlhIHJlcGx5IGUtbWFpbCBvciBmb3J3YXJk
aW5nIHRvIDNDb20gYXQgcG9zdG1hc3RlckAzY29tLmNvbS4gDQo