Cross site scripting

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Design/Logic Flaw

EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...

CVE-2011-1421

EMC NetWorker 7.5.x (before 7.5.4.3) and 7.6.x (before 7.6.1.5) are affected when the client push feature is enabled. The issue is weak permissions set on an unspecified file, enabling local users to gain elevated privileges. Exploitation details are not provided in the sources. Remediation is to...

CVE-2011-1421

EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...

CVE-2011-1422

CVE-2011-1422 is an XSS vulnerability in an unspecified Shockwave Flash file used by EMC RSA Adaptive Authentication On-Premise (AAOP) versions 2.x, 5.7.x and 6.x. The affected component is the Flash/Shockwave content within AAOP; the root cause is an input/validation issue allowing arbitrary web...

CVE-2011-1422

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-1421: Undefined Security Weakness

EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...

CVE-2011-1422: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

EMC Networker weak permissions

Weak permissions for executable file...

ESA-2011-013: EMC NetWorker arbitrary code execution with elevated privileges vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-013: EMC NetWorker arbitrary code execution with elevated privileges vulnerability. EMC Identifier: ESA-2011-013 CVE Identifier: CVE-2011-1421 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC SW: EMC...

EMC RSA Adaptive Authenticatio crossite scripting

Flash file crossite scripting...

ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication (On-Premise) Flash File Security Patch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication On-Premise Flash File Security Patch Advisories Updated April 14, 2011 Summary: A potential cross-site scripting vulnerability has been identified in RSA...

EMC Buys Security Firm NetWitness

UPDATE: Call it ‘dancing with the girl that brought ‘ya,’: two weeks after it disclosed a serious security breach at its RSA Security Division, tech firm EMC said it was buying NetWitness, a threat analysis firm that helped it detect the breach in the first place. EMC said on Monday that it had...

ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications. EMC Identifier: ESA-2011-012 CVE Identifier: CVE-2011-0647 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC NetWorker Module f...

EMC Replication Manager code execution

Command execution via TCP/6542 service...

EMC Data Protection Advisor Collector for Solaris SPARC不安全文件权限漏洞

Bugtraq ID: 47036 CVE ID：CVE-2011-1420 EMC Data Protection Advisor Collector是一款数据备份报告工具。 Solaris SPARC平台下的EMC Data Protection Advisor Collector不正确设置文件权限，本地攻击者可以利用漏洞以目标用户安全上下文执行任意代码，可导致特权提升。 EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1 EMC Data Protection Advisor Collector for...

CVE-2011-1420

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

Code injection

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-1420

EMC Data Protection Advisor Collector for Solaris SPARC (version 5.7 and 5.7.1) contains incorrect/weak file permissions that allow a local attacker to execute code with elevated privileges. Affected builds 5.7 and 5.7.1 require Patch/DPA-8873; EMC notes that Build 5833 for both 5.7 and 5.7.1 res...

CVE-2011-1420

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...