EMC AlphaStor Library Manager Detection

The remote host is running a EMC AlphaStor Library Manager service. AlphaStor is a tape backup management and library sharing for EMC NetWorker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid33280;...

EMC AlphaStor Device Manager Detection

The remote host is running a EMC AlphaStor Device Manager service. AlphaStor is a tape backup management and library sharing for EMC NetWorker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid33283;...

EMC AlphaStor Library Manager Remote Code Execution

The installed instance of AlphaStor Library Manager is vulnerable to a command execution flaw when it receives a packet with a 0x44 code. Packet string argument is used unsanitized as a call to the 'system' function. An unauthenticated, remote attacker may be able to exploit this flaw to execute...

DSquare Exploit Pack: D2SEC_ALPHASTOR_LM

Name| d2secalphastorlm ---|--- CVE| CVE-2008-2157 Exploit Pack| D2ExploitPack Description| EMC AlphaStor Library Manager Remote Command Execution Vulnerability Notes|...

Stack overflow

Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025...

Design/Logic Flaw

robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500...

CVE-2008-2157

The provided connected documents confirm a remote command-execution vulnerability (CVE-2008-2157) in EMC AlphaStor products. The EMC AlphaStor Library Manager is vulnerable to arbitrary command execution via an unsanitized packet string argument that is processed by a system() call when handling ...

CVE-2008-2158

EMC AlphaStor 3.1 SP1 for Windows is affected by multiple stack-based buffer overflows in the Server Agent’s Command Line Interface process. The vulnerability (CVE-2008-2158) allows remote code execution by sending specially crafted TCP packets to port 41025. Several public references (including ...

CVE-2008-2158

Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025...

iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities

iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website at the following URL...

iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability

iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website found at the following link...

EMC AlphaStor库管理器任意命令执行漏洞

CVECAN ID: CVE-2008-2157 AlphaStor是用于管理磁盘的应用程序组件。 AlphaStor中库管理器（Library Manager）用于管理在分布的位置上替换磁盘驱动。该管理器由单个进程robotd组成，在TCP 3500端口上监听入站连接。 如果对库管理器发送了特殊请求的话，robotd会使用报文中的字符串在系统上通过CreateProcess函数执行命令，这允许攻击者在主机上以SYSTEM权限执行任意程序。 EMC AlphaStor 3.1 SP1 for Windows EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

CVE-2008-2158: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025...

CVE-2008-2157: Improper Input Validation

robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500...

EMC AlphaStor multiple security vulnerabilities

Library Manager TCP/3500 code execution, Server Agent TCP/41025 multiple buffer overflows...

EMC AlphaStor Device Manager Arbitrary Command Execution

EMC AlphaStor Device Manager is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. Module Options msf use auxiliary/admin/emc/alphastor/devicemanagerexec msf undefineddevicemanagerexec show actions ...actions... msf...

EMC AlphaStor Library Manager Arbitrary Command Execution

EMC AlphaStor Library Manager is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. Module Options msf use auxiliary/admin/emc/alphastor/librarymanagerexec msf undefinedlibrarymanagerexec show actions ...actions... msf...

EMC AlphaStor Agent Buffer Overflow

This module exploits a stack buffer overflow in EMC AlphaStor 3.1. By sending a specially crafted message, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/emc/alphastor/agent msf undefinedagent show actions ...actions... msf undefinedagent set ACTION msf...

Format string

Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface...

Stack overflow

Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface...