Integer overflow

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

CVE-2009-1119

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

CVE-2009-1119

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

CVE-2009-1119

EMC RepliStor is affected on versions earlier than 6.2 SP5 and 6.3 SP2. The vulnerability is described as multiple heap overflows triggered by specially crafted messages to the remote services ctrlservice.exe or rep_srv.exe, with the root cause attributed to an integer overflow. The impact cited ...

CVE-2009-1119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

EMC Replistor buffer overflow

Integer overflows in system services leads to buffer overflow...

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability  2009.April.08 Summary:  ======== Fortinet's FortiGuard Global Security Research Team has discovered a buffer overflow vulnerability in EMC RepliStor. Impact: ======= Remote code execution. Risk:  ===== Critical Affected Software: ...

EMC RepliStor Server Service DoASOCommand Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC RepliStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DoRcvRpcCall RPC function exposed via the repsrv.exe process which listens by defaul...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

Design/Logic Flaw

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products (NetWorker Server, Storage Node, and Client 7.3.x/7.4.x; OpenVMS 7.3.2 ECO6 and earlier; Module for Microsoft Exchange 5.1 and earlier; Module for Microsoft Applications 2.0 and earlier; Module for Meditech 2.0 and earlier; PowerSnap 2.4 SP1 and ear...

CVE-2008-6219: Undefined Security Weakness

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

EMC AutoStart Backbone Engine远程任意指令执行漏洞

EMC AutoStart Backbone Engine是一种网络应用监视控制系统。 EMC AutoStart Backbone Engine的实现上存在严重安全漏洞，远程攻击者可能利用此漏洞在运行了AutoStart Backbone Engine的服务器上执行任意指令。 EMC AutoStart Backbone Engine无条件的信任一个来自己客户端请求中的指针，将其作为运行代码的入口，因此远程攻击者可以利用此漏洞使服务器端运行任意系统指令从而控制服务器系统。 EMC AutoStart Backbone Engine 厂商补丁： EMC ---...

Null pointer dereference

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311

The CVE-2009-0311 issue affects EMC AutoStart’s Backbone Engine (ftbackbone.exe) prior to 5.3 SP2. According to the provided documents, remote attackers can cause code execution by sending a crafted value that is dereferenced as a function pointer, with exploitation described for the Backbone ser...

CVE-2009-0311

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311: Improper Input Validation

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

EMC RepliStor Multiple Remote Heap Based Buffer Overflows

According to its version, the installation of EMC RepliStor Server on the remote host is affected by multiple heap overvlow vulnerabilities. By sending a specially crafted request, an unauthorized attacker could execute arbitrary code with SYSTEM level privileges. C Tenable Network Security, Inc...