The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
https://exchange.xforce.ibmcloud.com/vulnerabilities/65205
http://www.zerodayinitiative.com/advisories/ZDI-11-061/
http://www.vupen.com/english/advisories/2011/0304
http://www.securityfocus.com/bid/46235
http://www.securityfocus.com/archive/1/516282/100/0/threaded
http://www.securityfocus.com/archive/1/516260