EMC AutoStart ftAgent Opcode 85 Subcode 01 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Autostart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ftAgent.exe service, which listens by default on TCP port 8045. When handling messag...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

Buffer overflow

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

CVE-2012-0409

The CVE-2012-0409 issue affects EMC AutoStart, specifically the ftAgent component. The vulnerability stems from parsing routines for op-codes in EMC AutoStart ftAgent’s network protocol, where values read from the network are used in memory size calculations without validation. This can cause int...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities. EMC Identifier: ESA-2012-020 CVE Identifier: CVE-2012-0409 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC AutoStart 5.3.x EMC AutoStart...

SevenDust/666, AutoStart 9805

1998 The late 1990s saw the advent of more malicious malware for the Mac. Discovered a few days before Halloween 1998, the Sevendust virus would remove all files from the infected hard drive, but leave applications and one file named “666” in the Extensions folder. AutoStart, one of the first Mac...

EMC AutoStart Login Request Stack Buffer Overflow (CVE-2011-2735)

A remote code execution vulnerability has been reported in EMC AutoStart. The vulnerability is due to improper boundary checking in EMC AutoStart's Agent Service. A remote attacker may exploit this vulnerability by sending a malicious Login request to an affected service. Successful exploitation...

EMC Autostart ftAgent Overflow

Added: 09/19/2011 CVE: CVE-2011-2735 BID: 49238 OSVDB: 74597 Background EMC AutoStart is a cross-platform high-availability clustering solution. Problem The Agent Service of EMC AutoStart listens on TCP port 8045 and is vulnerable to a heap overflow when parsing malformed messages with opcode 0x1...

EMC Autostart ftAgent Overflow

Added: 09/19/2011 CVE: CVE-2011-2735 BID: 49238 OSVDB: 74597 Background EMC AutoStart is a cross-platform high-availability clustering solution. Problem The Agent Service of EMC AutoStart listens on TCP port 8045 and is vulnerable to a heap overflow when parsing malformed messages with opcode 0x1...

EMC Autostart ftAgent Overflow

Added: 09/19/2011 CVE: CVE-2011-2735 BID: 49238 OSVDB: 74597 Background EMC AutoStart is a cross-platform high-availability clustering solution. Problem The Agent Service of EMC AutoStart listens on TCP port 8045 and is vulnerable to a heap overflow when parsing malformed messages with opcode 0x1...

EMC Autostart ftAgent Overflow

Added: 09/19/2011 CVE: CVE-2011-2735 BID: 49238 OSVDB: 74597 Background EMC AutoStart is a cross-platform high-availability clustering solution. Problem The Agent Service of EMC AutoStart listens on TCP port 8045 and is vulnerable to a heap overflow when parsing malformed messages with opcode 0x1...

EMC AutoStart multiple buffer overflows

Multiple buffer overflows on network requests parsing...

ZDI-11-273: EMC Autostart Domain Name Logging Remote Code Execution Vulnerability

ZDI-11-273: EMC Autostart Domain Name Logging Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-273 August 23, 2011 -- CVE ID: CVE-2011-2735 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: EMC -- Affected Products: EMC AutoStart -- TippingPointTM...

ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability

ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-274 August 23, 2011 -- CVE ID: CVE-2011-2735 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: EMC -- Affected Products: EMC AutoStart --...

ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability

ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-275 August 23, 2011 -- CVE ID: CVE-2011-2735 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: EMC -- Affected Products: EMC AutoStart --...

EMC AutoStart ftAgent Multiple Remote Code Execution Vulnerabilities

The version of EMC AutoStart on the remote host reportedly contains multiple remote code execution vulnerabilities : - When creating error messages to be written to logs, a user controlled string from the packet is used as an argument to a function containing a format string. The result of that...

CVE-2011-2735

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted message over TCP...

Buffer overflow

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted message over TCP...

CVE-2011-2735

EMC AutoStart is affected by CVE-2011-2735 (ftAgent/Agent Service). A vulnerability in the Agent Service allows remote code execution via malformed TCP messages to port 8045, caused by heap/buffer overflow when parsing messages (opcode 0x11 or 0x140 depending on advisory). Exploitation would run ...