Multiple Vendors RPC librpc.dll Stack Buffer Overflow (CVE-2009-2754)

Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. The librpc.dll handles the RPC protocol parsing. A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. The...

EMC AlphaStor Agent - Remote Buffer Overflow (Metasploit)

$Id: alphastoragent.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Preemptive Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. Informix is a family of relational database management system RDBMS products by IBM. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol...

EMC RepliStor rep_srv.exe Crafted TCP Packet Remote DoS (ESA-09-019)

According to its version, the EMC RepliStor Server service running on the remote host reportedly may crash while attempting to process a specially crafted network packet. An unauthenticated, remote attacker can leverage this issue to deny service to legitimate users. C Tenable Network Security,...

CVE-2009-2754

CVE-2009-2754 relates to a stack-based buffer overflow in librpc.dll’s authentication for the Portmapper service (portmap.exe) used by IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.TC9 and 11.x prior to 11.10.TC3, and EMC Legato NetWorker. The issue is triggered by a crafted parameter siz...

CVE-2009-2754: Undefined Security Weakness

Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager ISM Portmapper service aka portmap.exe, as used in IBM Informix Dynamic Server IDS 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execut...

ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-023 March 1, 2010 -- CVE ID: CVE-2009-2754 -- Affected Vendors: IBM EMC -- Affected Products: IBM Informix EMC NetWorker -- TippingPointTM IPS Customer...

Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server and EMC Legato Networker. User interaction is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll,...

DSquare Exploit Pack: D2SEC_HOMEBASE

Name| d2sechomebase ---|--- CVE| CVE-2010-0620 Exploit Pack| D2ExploitPack Description| EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability Notes|...

Directory traversal

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

CVE-2010-0620

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

CVE-2010-0620: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

CVE-2010-0620

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

EMC HomeBase Server directory traversal

Directory traversal via SSL services...

ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-020 February 23, 2010 -- CVE ID: CVE-2010-0620 -- Affected Vendors: EMC -- Affected Products: EMC HomeBase Server -- Vulnerability Details: This...

CVE-2010-0620

EMC HomeBase Server suffers a directory traversal and remote code execution vulnerability in the SSL Service (CVE-2010-0620). Affects EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2. The flaw allows an unauthenticated, remote attacker to overwrite arbitrary files and execute code vi...

ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability

ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability Identifier: ESA-2010-003 Identifier: HB6042 CVE Identifier: CVE-2010-0620 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC HomeBase Server version 6.2.x EMC HomeBase Server version 6.3....

EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to upload arbitrary files on vulnerable installations of EMC HomeBase Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HomeBase SSL Service due to a failure to sanitize '../' directory traversal...

EMC Captiva PixTools Distributed Imaging ActiveX crafted web page

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. This software application can be integrated into existing applications serving as either a centralized or distributed document capture module. EMC Captiva PixTools...

EMC RepliStor rep_srv and ctrlservice Denial of Service (CVE-2009-3744)

EMC RepliStor is a data recovery and protection system exclusively for Microsoft Windows. Recovery and protection are achieved by providing easy to use data replication to multiple sources in real-time or on a schedule. Files, directories, volumes and shares can be replicated as long as TCP/IP...