Lucene search
+L

903 matches found

CNVD
CNVD
•added 2016/06/14 12:00 a.m.•15 views

EMC Data Domain Insecure NFS Load Option Vulnerability

EMC Data Domain systems are data protection storage solutions. EMC Data Domain versions 5.4, 5.5, 5.6, and 5.7 have a security vulnerability that enables an administrator user to create NFS exports, and the default use of norootsquash also enables clients to load NFS exports with root privileges...

8.2CVSS7AI score0.00978EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/06/14 12:00 a.m.•16 views

EMC Data Domain Insecure Password Reset Vulnerability

EMC Data Domain systems are data protection storage solutions. EMC Data Domain versions 5.4, 5.5, 5.6, and 5.7 have a security vulnerability that could allow users to change their passwords without having to provide their current passwords, or even change the passwords of other users in the same...

9.8CVSS6.9AI score0.03482EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/06/12 12:00 a.m.•13 views

EMC Data Domain OS Arbitrary Account Hijacking Vulnerability

EMC Data Domain systems are data protection storage solutions. EMC Data Domain OS stores the session identifier of the GUI user in a globally readable file, which can be exploited by a local user to hijack arbitrary accounts...

8.8CVSS7AI score0.00313EPSS
SaveExploits0References1
OSV
OSV
•added 2016/06/10 1:59 a.m.•14 views

CVE-2016-0910

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

8.8CVSS5.9AI score0.00313EPSS
SaveExploits0References2
NVD
NVD
•added 2016/06/10 1:59 a.m.•24 views

CVE-2016-0910

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

8.8CVSS8.2AI score0.00313EPSS
SaveExploits0References2
Prion
Prion
•added 2016/06/10 1:59 a.m.•19 views

Code injection

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

4.3CVSS6.9AI score0.00313EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/06/10 1:00 a.m.•31 views

CVE-2016-0910

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

8.3AI score0.00313EPSS
SaveExploits0References2
CVE
CVE
•added 2016/06/10 1:00 a.m.•57 views

CVE-2016-0910

The CVE-2016-0910 entry concerns EMC Data Domain OS. Affected versions are 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0. The vulnerability arises because GUI session identifiers are stored in a world-readable file, enabling a local attacker to hijack arbitrary accounts via uns...

8.8CVSS8.1AI score0.00313EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/10 12:00 a.m.•5 views

CVE-2016-0910: Undefined Security Weakness

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

8.8CVSS7.9AI score0.00313EPSS
SaveExploits0References2
Veeam
Veeam
•added 2016/05/02 12:00 a.m.•233 views

Backup to Data Domain fails with “Error: calling system(), returns nonzero. Err: 5040 Failed to connect to storage.”

Challenge During the "preparing storage for backup" phase of a Veeam backup job to a Data Domain, the job fails, displaying the following error message: Error: calling system, returns nonzero. Err: 5040 Failed to connect to storage Cause The Data Domain chooses to use a different NIC than...

6.8AI score
SaveExploits0
Veeam
Veeam
•added 2016/04/12 12:00 a.m.•61 views

Adding DDboost repository results in error 5049 or 5037

When attempting to add an EMC Data Domain repository, one of the following errors is received:Illegal operation. Err: 5037Failed to connect to '\datadomain'.ORUnable to connect to Data Domain...

4AI score
SaveExploits0
Veeam
Veeam
•added 2015/04/27 12:00 a.m.•189 views

Cannot restore to the backup repository host when storage VSP is enabled

Article Applicability Starting in Veeam Backup & Replication 12.1, this error will no longer occur due to internal coding changes. Challenge A Hyper-V Instant Recovery or SureBackup Job fails with the error message: Cannot restore to the backup repository host when storage VSP is enabled. Cause T...

6.7AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2015/01/09 12:00 a.m.•17 views

Data loss risk with Backup Copy to Data Domain via DDBoost

Challenge Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss. Cause Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss due to Data Domain erroneously processing fi...

7AI score
SaveExploits0
Veeam
Veeam
•added 2014/12/25 2:31 p.m.•30 views

Release Notes for Veeam Backup & Replication 8.0 Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 1 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817 or 8.0.0.831 prior to installing...

6.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/17 12:00 a.m.•5 views

CVE-2014-4234: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via unknown vectors related to Data, Domain & Function Security...

5CVSS6AI score0.02478EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/15 12:00 a.m.•4 views

CVE-2014-0435: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect availability via unknown vectors related to Data, Domain & Function Security...

4CVSS6AI score0.01282EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/15 12:00 a.m.•4 views

CVE-2014-0399: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Data, Domain & Function Security...

4CVSS6AI score0.01118EPSS
SaveExploits0References1
NVD
NVD
•added 2007/04/03 12:19 a.m.•27 views

CVE-2007-1836

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

9CVSS7.4AI score0.02379EPSS
SaveExploits0References6
Prion
Prion
•added 2007/04/03 12:19 a.m.•27 views

Command injection

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

9CVSS7.9AI score0.02379EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/03 12:00 a.m.•4 views

CVE-2007-1836: Undefined Security Weakness

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

9CVSS6.4AI score0.02379EPSS
SaveExploits0References1
Rows per page
Query Builder