CVE-2017-10955

The CVE-2017-10955 issue affects EMC Data Protection Advisor 6.3.0, where the EMC DPA Application service listens on TCP port 9002. The root cause is improper validation of the user-supplied preScript parameter before it is used to execute a system call, enabling remote code execution. An attacke...

CVE-2017-10955: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is required to exploit this vulnerability. The specific flaw exists within the EMC DPA Application service, which listens on TCP port 9002 by...

CVE-2017-8022

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

CVE-2017-8022

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

Buffer overflow

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

CVE-2017-8022

Summary: CVE-2017-8022 affects EMC NetWorker Server (nsrd). A buffer overflow in nsrd exists on affected versions: prior to 8.2.4.9, all 9.0.x, prior to 9.1.1.3, and prior to 9.2.0.4. Exploitation could be remote and unauthenticated, potentially allowing arbitrary code execution or a denial of se...

CVE-2017-8022

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

CVE-2017-8024

EMC Isilon OneFS versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system...

Cross site scripting

EMC Isilon OneFS versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8024

EMC Isilon OneFS is affected by a reflected cross-site scripting vulnerability (CVE-2017-8024) in multiple release lines. The CVE description in the linked sources states that versions prior to 8.1.0.1, prior to 8.0.1.2, prior to 8.0.0.6, and version 7.2.1.x are impacted. The vulnerability is des...

CVE-2017-8024

EMC Isilon OneFS versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system...

PT-2017-18074

Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions prior to 8.1.0.1 EMC Isilon OneFS versions prior to 8.0.1.2 EMC Isilon OneFS versions prior to 8.0.0.6 EMC Isilon OneFS version 7.2.1.x Description The issue is a reflected cross-site scripting vulnerability. It may b...

EMC NetWorker Buffer Overflow Vulnerability

EMC NetWorker Server contains a buffer overflow vulnerability that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 8.2.4.9, 9.0.x all supported versions, prior to 9.1.1.3, and prior to 9.2.0.4 are affected. EMC NetWorker Buffer Overflow...

CVE-2017-8024: Improper Neutralization of Input During Web Page Generation

EMC Isilon OneFS versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8022: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

PT-2017-18073

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions prior to 8.2.4.9 EMC NetWorker all supported 9.0.x versions EMC NetWorker versions prior to 9.1.1.3 EMC NetWorker versions prior to 9.2.0.4 Description A buffer overflow issue affects the Server service nsrd, allowing a...

EMC NetWorker Buffer Overflow Vulnerability (CNVD-2017-32224)

EMC NetWorker is a suite of unified backup and recovery software from EMC. The software provides backup and recovery, deduplication elimination, backup reporting, and more. A buffer overflow vulnerability exists in the Server service nsrd in EMC NetWorker. A remote attacker could exploit this...

Opentext Documentum Content Server File Hijack / Privilege Escalation

!/usr/bin/env python Opentext Documentum Content Server formerly known as EMC Documentum Content Server does not properly validate input of PUTFILE RPC-command which allows any authenticated user to hijack arbitrary file from Content Server filesystem, because some files on Content Server...

CVE-2017-15014

OpenText Documentum Content Server (formerly EMC Documentum Content Server) up to version 7.3 is affected. The vulnerability arises when an authenticated user uploads content: after START_PUSH, content is uploaded, then END_PUSH_V2 returns a DATA_TICKET used to identify the file on the filesystem...

CVE-2017-15012

OpenText Documentum Content Server (formerly EMC Documentum Content Server) up to version 7.3 is affected by CVE-2017-15012 due to improper validation of input to the PUT_FILE RPC-command. This allows any authenticated user to hijack arbitrary files from the Content Server filesystem, enabling pr...