EMC AlphaStor Agent Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'EMC AlphaStor Age...

EMC Legato NetWorker Remote Execution Service Buffer Overflow (CVE-2007-3618)

EMC Legato NetWorker is an enterprise level backup and recovery suite product. It provides backup functionality for Windows, Linux, Unix, Netware, and VMS environments. EMC Legato NetWorker is designed with a Server-Agent principle. The communication between nodes is facilitated via a series of...

Hummingbird STR Service Buffer Overflow

Hummingbird STR service STRsvc.exe is installed on the remote host. It is included with EMC Documentum eRoom, OpenText Hummingbird, and OpenText Search Server. The installed version is affected by a buffer overflow vulnerability. By sending a very large packet to the Hummingbird STR service, it m...

多个厂商Hummingbird STR服务栈溢出漏洞

BUGTRAQ ID: 36868 EMC Documentum eRoom是基于WEB的协作服务器，OpenText Search Server是高效的纯文本搜索引擎，上述产品都使用了Hummingbird STR服务。 默认监听于TCP 10500端口上的Hummingbird STR服务（STRsvc.exe）中存在栈溢出漏洞。STRlib.dll模块将接收到的网络报文拷贝到了静态的栈缓冲区，如果发送了超长的报文就可以触发栈溢出，导致以SYSTEM权限执行任意指令。 EMC Documentum eRoom 7.4.1 Open Text Corporation Search...

Hummingbird STR service / EMC Documentum eRoom / OpenText Search Server buffer overflow

Buffer overflow on TCP/10500 traffic parsing...

Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Documentum eRoom, OpenText Hummingbird and OpenText Search Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hummingbird STR...

EMC Retrospect Client Crafted Packet Buffer Overflow (CVE-2006-2391)

The EMC Retrospect suite is a system designed to automate backup operations in an enterprise environment. The system is comprised of a server and multiple clients, also known as agents. The server initiates operations on the client, including backup of the files, clock synchronization, and variou...

EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)

The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...

Directory traversal

Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...

Code injection

repserv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144...

Heap overflow

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

CVE-2008-3685

Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...

CVE-2009-3744

repserv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144...

DSquare Exploit Pack: D2SEC_EMCAXW

Name| d2secemcaxw ---|--- CVE| CVE-2008-3685 Exploit Pack| D2ExploitPack Description| EMC ApplicationXtender Workflow Server Arbitrary File Upload Vulnerability Notes|...

CVE-2008-3684

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

CVE-2008-3684

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

CVE-2008-3685

CVE-2008-3685 affects EMC Documentum ApplicationXtender Workflow Server Admin Agent (aws_tmxn.exe); vulnerable via directory traversal sequences over TCP port 2606, enabling remote attackers to upload arbitrary files and execute arbitrary code. Impact is described as potentially remote code execu...

CVE-2009-3744

repserv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144...

CVE-2009-3744

The CVE-2009-3744 issue affects EMC RepliStor’s rep_srv.exe service. A vulnerability in the server’s packet handling (input validation error) can be triggered by a specially crafted TCP packet sent to port 7144, allowing remote unauthenticated attackers to cause a denial-of-service by terminating...

CVE-2008-3684

CVE-2008-3684 is a heap-based buffer overflow in the AWS_TMXN.EXE component (Admin Agent service) of EMC Documentum ApplicationXtender Workflow Server. The vulnerability exists in the aws_tmxn.exe listener on TCP port 2606 and allows remote attackers to execute arbitrary code, as described by ZDI...