PT-2015-1720

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

PT-2015-1722

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

PT-2015-1721

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

PT-2015-1714

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

PT-2015-1713

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

PT-2015-1716

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

PT-2015-1718

Name of the Vulnerable Software and Affected Versions Berkeley DB affected versions not specified Description The vulnerability in the Data Store component of the Berkeley DB database management system is related to coding errors. Exploitation of this issue may allow a local attacker to compromis...

I2P - The Invisible Internet Project

I2P is an anonymous network, exposing a simple layer that applications can use to anonymously and securely send messages to each other. The network itself is strictly message based a la IP, but there is a library available to allow reliable streaming communication on top of it a la TCP. All...

CVE-2014-4632

VMware vSphere Data Protection VDP 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoo...

Design/Logic Flaw

VMware vSphere Data Protection VDP 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoo...

PT-2015-3763

Name of the Vulnerable Software and Affected Versions VMware vSphere Data Protection VDP versions 5.1, 5.5 through 5.5.8, 5.8 through 5.8.0 EMC Avamar Data Store ADS versions 6.x EMC Avamar Virtual Edition AVE versions 6.x, 7.0.x Description The issue allows man-in-the-middle attackers to spoof...

CVE-2014-4632: Undefined Security Weakness

VMware vSphere Data Protection VDP 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoo...

CVE-2014-4624

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

Default credentials

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store ADS GEN4S and Avamar Virtual Edition AVE, when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force atta...

CVE-2014-4624

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

CVE-2014-4624

EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x up to 7.0.2-43 expose MCUser and GSAN passwords via Java API calls without authentication (remote information disclosure). VMware vSphere Data Protection (VDP) 5.x also vulnerable via Java API access to retrieve credential...

CVE-2014-4623

EMC Avamar ADS GEN4(S) and Avamar Virtual Edition (AVE) versions 6.0.x, 6.1.x, and 7.0.x are affected when the Password Hardening package is installed prior to 2.0.0.4. The issue stems from using UNIX DES crypt for password hashing, enabling context-dependent attackers to recover cleartext passwo...

CVE-2014-4624: Undefined Security Weakness

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

CVE-2014-4623: Undefined Security Weakness

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store ADS GEN4S and Avamar Virtual Edition AVE, when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force atta...

PT-2014-6031

Name of the Vulnerable Software and Affected Versions EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 6.x and 7.0.x through 7.0.2-43 Description The issue allows remote attackers to discover grid MCUser and GSAN passwords via a crafted Java API call, as no authentication is...