EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution tested against: Microsoft Windows Server 2008 r2 sp1 EMC Data Protection Advisor 5.8 sp5 vulnerability: the "DPA Illuminator"...

EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution tested against: Microsoft Windows Server 2008 r2 sp1 EMC Data Protection Advisor 5.8 sp5 vulnerability: the "DPA Illuminator" service DPAIlluminator.exe listening on public port 8090 tcp/http and 8453 tcp/https is...

EMC Data Protection Advisor Web UI Detection

The report web server is the Web UI for EMC Data Protection Advisor, an automated analysis and alerting system for backup and replication infrastructure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64702; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25";...

EMC Data Protection Advisor CXML Service Detection

The CXML service for EMC Data Protection Advisor, an automated analysis and alerting system for backup and replication infrastructure, was detected on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

EMC Data Protection Advisor Web UI Directory Traversal

According to its build date, the EMC Data Protection Advisor Web UI on the remote host is affected by a directory traversal vulnerability that may allow a remote, unauthenticated attacker to copy and read files from the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability.

ESA-2012-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability. EMC Identifier: ESA-2012-060 CVE Identifier: CVE-2012-4616 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected Products: EMC Data...

CVE-2012-4616

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor DPA 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor DPA 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2012-4616

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor DPA 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2012-4616

CVE-2012-4616 affects EMC Data Protection Advisor (DPA) Web UI. A directory traversal vulnerability in the DPA Web UI enables remote attackers to copy/read arbitrary files from the server. Affected products/versions include DPA 5.6 (SP1), 5.7 (SP1), and 5.8 (SP1–SP4). The root cause is a Web UI d...

ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities EMC Identifier: ESA-2012-018, DPA-14718 CVE Identifier: CVE-2012-0406 CVE Identifier: CVE-2012-0407 Severity Rating: CVSS v2 Base Score: See below for CVSS Base Scores for individual...

EMC Data Protection Advisor security vulnerabilities

Integer overflow, NULL pointer dereference...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

Null pointer dereference

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

Integer overflow

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

EMC Data Protection Advisor NULL Pointer Dereference Denial of Service Vulnerability

EMC Data Protection Advisor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EMC Data Protection Advisor 5.8.1 - Denial of Service

EMC Data Protection Advisor 5.8.1 - Denial of Service Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A...