5680 matches found
EMC Legato NetWorker portmapper allows remote calls to "pmap_set" and "pmap_unset"
Overview The EMC Legato NetWorker PortMapper allows remote access to pmapset and pmapunset. This could allow a remote attacker to cause a denial of service or potentially to eavesdrop on communications between NetWorker programs. Description EMC Legato NetWorker is a cross-platform backup and...
EMC Legato NetWorker uses weak AUTH_UNIX authentication
Overview EMC Legato NetWorker uses weak AUTHUNIX authentication, allowing a remote attacker to execute arbitrary commands, gain elevated privileges, or cause a denial of service. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun...
CVE-2005-2357: Undefined Security Weakness
Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2005-2358: Undefined Security Weakness
EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...
EMC Legato NetWorker database services use insufficient authentication
Overview The EMC Legato NetWorker database services use weak authentication, allowing a remote attacker to gain root access to the server. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun Microsystems as Solstice Backup and StorEdg...
[Full-disclosure] iDEFENSE Security Advisory 08.05.05: EMC Navisphere Manager Directory Traversal Vulnerability
EMC Navisphere Manager Directory Traversal Vulnerability iDEFENSE Security Advisory 08.05.05 www.idefense.com/application/poi/display?id=288&type=vulnerabilities August 05, 2005 I. BACKGROUND EMC Navisphere storage management software is a suite of tools that enables discovery, monitoring,...
EMC Navisphere Manager Directory Traversal Vulnerability
Web interface directory traversal...
EMC Navisphere Manager 6.x - Directory Traversal / Information Disclosure
source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose the...
EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure
EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly...
Low: Red Hat Bug Fix Advisory: Updated lvm package
An updated lvm package that includes a number of bug fixes and enhancements is now available for the latest Red Hat Enterprise Linux Update 3 kernel release. LVM includes all of the support for handling read/write operations on physical volumes, creating volume groups from one or more physical...
EMC AlphaStor Library Manager Detection
Binary data 4563.prm...
CVE-2002-0113
EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...
CVE-2002-0114
EMC NetWorker formerly Legato NetWorker before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform...
CVE-2002-0114
EMC NetWorker formerly Legato NetWorker before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform...
CVE-2002-0113
CVE-2002-0113 concerns EMC NetWorker (formerly Legato NetWorker) before version 7.0. The affected component is the log storage path, where logs are written to â/nsr/logs/â with world-readable permissions, allowing local users to read potentially sensitive information and possibly gain privileges....
CVE-2002-0114
CVE-2002-0114 affects EMC NetWorker (Legato NetWorker) prior to version 7.0, where passwords are stored in plaintext in the daemon.log. This enables local users to gain privileges by reading the password from that file. The description notes the issue was originally reported for Legato NetWorker ...
CVE-2002-0113
EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...
CVE-2002-0113: Undefined Security Weakness
EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...
CVE-2002-0114: Undefined Security Weakness
EMC NetWorker formerly Legato NetWorker before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform...
