ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities. EMC Identifier: ESA-2012-020 CVE Identifier: CVE-2012-0409 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC AutoStart 5.3.x EMC AutoStart...

CVE-2012-2277

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

CVE-2012-2276

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

Design/Logic Flaw

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

Null pointer dereference

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2276

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2277

CVE-2012-2277 affects EMC Documentum Information Rights Management (IRM) Server 4.x before 4.7.0100 and 5.x before 5.0.1030. A DoS condition arises when remote attackers send newline characters in Id fields of multiple batch begin untethered commands, causing pvcontrol.exe to hang. Impact is a de...

CVE-2012-2276

CVE-2012-2276 affects EMC Documentum Information Rights Management (IRM) Server 4.x (before 4.7.0100) and 5.x (before 5.0.1030). The vulnerability is a NULL pointer dereference in the IRM Server when processing input data that (1) lacks FIPS fields or (2) has an invalid version number, leading to...

CVE-2012-2277

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

EMC Documentum Information Rights Management Server DoS

Few different DoS conditions...

ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities. EMC Identifier: ESA-2012-019 CVE Identifiers: CVE-2012-2276, CVE-2012-2277 Severity Rating: CVSS v2 Base Score: 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C Affected products: EMC...

CVE-2012-2277: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

CVE-2012-2276: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)

A buffer overflow vulnerability has been reported in EMC NetWorker...

ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities EMC Identifier: ESA-2012-018, DPA-14718 CVE Identifier: CVE-2012-0406 CVE Identifier: CVE-2012-0407 Severity Rating: CVSS v2 Base Score: See below for CVSS Base Scores for individual...

EMC Data Protection Advisor security vulnerabilities

Integer overflow, NULL pointer dereference...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

Null pointer dereference

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

Integer overflow

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...