PT-2017-18073

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions prior to 8.2.4.9 EMC NetWorker all supported 9.0.x versions EMC NetWorker versions prior to 9.1.1.3 EMC NetWorker versions prior to 9.2.0.4 Description A buffer overflow issue affects the Server service nsrd, allowing a...

EMC NetWorker Buffer Overflow Vulnerability (CNVD-2017-32224)

EMC NetWorker is a suite of unified backup and recovery software from EMC. The software provides backup and recovery, deduplication elimination, backup reporting, and more. A buffer overflow vulnerability exists in the Server service nsrd in EMC NetWorker. A remote attacker could exploit this...

CVE-2016-0913: Improper Input Validation

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

EMC NetWorker 8.2.1.x < 8.2.2.6 / 9.0.x < 9.0.0.6 RCE

The version of EMC NetWorker installed on the remote Windows host is 8.2.1.x prior to 8.2.2.6 or 9.0.x prior to 9.0.0.6. It is, therefore, affected by a remote code execution vulnerability due to improper handling of authentication. An unauthenticated, remote attacker can exploit this to execute...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

Design/Logic Flaw

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916: Improper Authentication

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

PT-2016-4470

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 8.2.1.x through 8.2.2.5 EMC NetWorker versions 9.x prior to 9.0.0.6 Description The issue is related to authentication handling, allowing remote attackers to execute arbitrary commands by leveraging access to a different...

EMC NetWorker < 8.0.4.4 / 8.1.x < 8.1.3.6 / 8.2.x < 8.2.2.2 / 9.0.x < 9.0.0.2 RPC Authentication DoS

The version of EMC NetWorker installed on the remote Windows host is prior to 8.0.4.5, 8.1.x prior to 8.1.3.6, 8.2.x prior to 8.2.2.2, or 9.0.x prior to 9.0.0.2. It is, therefore, affected by a denial of service vulnerability due to improper handling of malformed RPC authentication requests. An...

EMC NetWorker RPC Authentication Message Handling Remote Denial of Service Vulnerability

EMC NetWorker is an application that supports disk backup, data replication, continuous data protection and deduplication. A security vulnerability in the EMC NetWorker RPC authentication messages allows remote attackers to exploit the vulnerability to submit a special request to cause the...

CVE-2015-6849

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service process outage via malformed RPC authentication messages...

Authentication flaw

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service process outage via malformed RPC authentication messages...

CVE-2015-6849

CVE-2015-6849 affects EMC NetWorker prior to 8.0.4.5, 8.1.x prior to 8.1.3.6, 8.2.x prior to 8.2.2.2, and 9.0 before build 407. The vulnerability is a denial of service caused by improper handling of malformed RPC authentication messages, allowing an unauthenticated, remote attacker to crash the ...

CVE-2015-6849

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service process outage via malformed RPC authentication messages...

CVE-2015-6849: Improper Input Validation

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service process outage via malformed RPC authentication messages...

PT-2015-7389

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions prior to 8.0.4.5 EMC NetWorker versions 8.1.x prior to 8.1.3.6 EMC NetWorker versions 8.2.x prior to 8.2.2.2 EMC NetWorker versions 9.0 prior to build 407 Description The issue allows remote attackers to cause a denial o...

EMC NetWorker nsr_render_log Local Privilege Escalation

The EMC NetWorker installed on the remote Windows host is a version prior to 8.0.4.3, or version 8.1.x prior to 8.1.2.6, or 8.2.x prior to 8.2.1.2 . It is, therefore, affected by a buffer overflow flaw in the nsrrenderlog command-line interface. A local attacker can exploit this to execute...

CVE-2015-0530

Buffer overflow in an unspecified function in nsrrenderlog in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors...

Buffer overflow

Buffer overflow in an unspecified function in nsrrenderlog in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors...