CVE-2016-9869: Undefined Security Weakness

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...

EMC Avamar ADS / AVE Server Detection

Binary data emcavamarserverdetect.nbin...

EMC Avamar ADS / AVE < 7.3.0 Hotfix 263301 PostgreSQL Command Local Privilege Escalation (ESA-2016-111)

According to its self-reported version number, the EMC Avamar Data Store ADS or Avamar Virtual Edition AVE software running on the remote host is a version prior to 7.3.0 Hotfix 263301 7.3.0.233, or the configuration is not patched. It is, therefore, affected by a local privilege escalation...

EMC Avamar ADS / AVE Installed (credentialed check)

Binary data emcavamarserverinstallednix.nbin...

Design/Logic Flaw

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

CVE-2016-0909

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

CVE-2016-0909

Affected products: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) prior to 7.3.0 Hotfix 263301 (7.3.0.233). Issue: Local privilege escalation vulnerability allowing an attacker to execute arbitrary PostgreSQL commands on the remote host and gain elevated privileges. Root cause / vec...

CVE-2016-0909

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

CVE-2016-0909: Improper Input Validation

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

PT-2016-4463

Name of the Vulnerable Software and Affected Versions EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions prior to 7.4 Description The issue may expose the Avamar servers to potentially be compromised by malicious users. Recommendations For versions 7.3 and older, update to a versio...

EMC Solutions Enabler Virtual Appliance 8.x < 8.3.0 RCE

The version of EMC Solutions Enabler Virtual Appliance running on the remote host is 8.x prior to 8.3.0. It is, therefore, affected by multiple vulnerabilities : - Multiple flaws exist in the web interface related to the GeneralCmdRequest, PersistantDataRequest, and GetCommandExecRequest classes...

EMC vApp Manager Detection

Binary data emcvappmanagerdetect.nbin...

EMC Unisphere for VMAX Virtual Appliance 8.x < 8.3.0 RCE

The version of EMC Unisphere for VMAX Virtual Appliance running on the remote host is 8.x prior to 8.3.0. It is, therefore, affected by multiple vulnerabilities : - Multiple flaws exist in the web interface related to the GeneralCmdRequest, PersistantDataRequest, and GetCommandExecRequest classes...

EMC Legato Networker Remote Exec Service Stack Overflow RCE

The EMC Legato Networker application running on the remote host is affected by a stack overflow condition in the Networker Remote Exec Service nsrexecd.exe, specifically within the sprintf function, when handling poll or kill requests. An unauthenticated, remote attacker can exploit this, via a...

CVE-2016-6646

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

Design/Logic Flaw

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...