CVE-2008-6219: Undefined Security Weakness

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

EMC AutoStart Backbone Engine远程任意指令执行漏洞

EMC AutoStart Backbone Engine是一种网络应用监视控制系统。 EMC AutoStart Backbone Engine的实现上存在严重安全漏洞，远程攻击者可能利用此漏洞在运行了AutoStart Backbone Engine的服务器上执行任意指令。 EMC AutoStart Backbone Engine无条件的信任一个来自己客户端请求中的指针，将其作为运行代码的入口，因此远程攻击者可以利用此漏洞使服务器端运行任意系统指令从而控制服务器系统。 EMC AutoStart Backbone Engine 厂商补丁： EMC ---...

Null pointer dereference

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311

The CVE-2009-0311 issue affects EMC AutoStart’s Backbone Engine (ftbackbone.exe) prior to 5.3 SP2. According to the provided documents, remote attackers can cause code execution by sending a crafted value that is dereferenced as a function pointer, with exploitation described for the Backbone ser...

CVE-2009-0311

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311: Improper Input Validation

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

EMC RepliStor Multiple Remote Heap Based Buffer Overflows

According to its version, the installation of EMC RepliStor Server on the remote host is affected by multiple heap overvlow vulnerabilities. By sending a specially crafted request, an unauthorized attacker could execute arbitrary code with SYSTEM level privileges. C Tenable Network Security, Inc...

EMC RepliStor Detection

Binary data emcreplistor.nbin...

ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability

ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-009 January 23, 2009 -- Affected Vendors: EMC -- Affected Products: EMC AutoStart -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have be...

EMC AutoStart code execution

Integer user controlled argument is used to calculate function pointer in ftbackbone.exe listens TCP/8042...

EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC AutoStart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Backbone service ftbackbone.exe which listens by default on TCP port...

CVE-2008-5419

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

CVE-2008-5420

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

Design/Logic Flaw

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

Stack overflow

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

CVE-2008-5420

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

CVE-2008-5419

EMC Control Center contains a stack-based buffer overflow in the Master Agent service (msragent.exe) that can be triggered by SST_CTGTRANS requests. Affects EMC Control Center 5.2 SP5 and 6.0; the vulnerable component is the Master Agent (msragent.exe) listening on TCP port 10444. Exploitation al...

CVE-2008-5420: Exposure of Sensitive Information to an Unauthorized Actor

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...