CVE-2017-8022

Summary: CVE-2017-8022 affects EMC NetWorker Server (nsrd). A buffer overflow in nsrd exists on affected versions: prior to 8.2.4.9, all 9.0.x, prior to 9.1.1.3, and prior to 9.2.0.4. Exploitation could be remote and unauthenticated, potentially allowing arbitrary code execution or a denial of se...

EMC NetWorker Buffer Overflow Vulnerability

EMC NetWorker Server contains a buffer overflow vulnerability that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 8.2.4.9, 9.0.x all supported versions, prior to 9.1.1.3, and prior to 9.2.0.4 are affected. EMC NetWorker Buffer Overflow...

EMC NetWorker Buffer Overflow Vulnerability (CNVD-2017-32224)

EMC NetWorker is a suite of unified backup and recovery software from EMC. The software provides backup and recovery, deduplication elimination, backup reporting, and more. A buffer overflow vulnerability exists in the Server service nsrd in EMC NetWorker. A remote attacker could exploit this...

EMC Legato Networker Remote Exec Service Stack Overflow RCE

The EMC Legato Networker application running on the remote host is affected by a stack overflow condition in the Networker Remote Exec Service nsrexecd.exe, specifically within the sprintf function, when handling poll or kill requests. An unauthenticated, remote attacker can exploit this, via a...

EMC Replication Manager and EMC Networker Module for Microsoft Remote Code Execution Vulnerability

EMC Replication Manager RM and so on are the products of the United States EMC EMC. RM is a set of EMC storage arrays in the data replication products provide an integrated management platform software; EMC Networker Module for Microsoft NMM is a set of Microsoft applications for the provision of...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

Design/Logic Flaw

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2016-0913

The CVE-2016-0913 entry affects EMC Replication Manager (RM) and related modules: RM before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6. The vulnerability allows remote RM servers to execute arbitrary commands by placin...

EMC NetWorker 8.2.1.x < 8.2.2.6 / 9.0.x < 9.0.0.6 RCE

The version of EMC NetWorker installed on the remote Windows host is 8.2.1.x prior to 8.2.2.6 or 9.0.x prior to 9.0.0.6. It is, therefore, affected by a remote code execution vulnerability due to improper handling of authentication. An unauthenticated, remote attacker can exploit this to execute...

EMC NetWorker Arbitrary Command Execution Vulnerability

EMC NetWorker, previously known as Legato NetWorker, is a cross-platform backup and recovery system. EMC NetWorker versions 8.2.1.x, 8.2.2.x 8.2.2.6 and 9.x 9.0.0.6 have an authentication processing error that could allow a remote attacker to execute arbitrary commands by accessing a different...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

Design/Logic Flaw

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916

EMC NetWorker is affected by CVE-2016-0916. Affected versions are 8.2.1.x and 8.2.2.x before 8.2.2.6, and 9.x before 9.0.0.6. The vulnerability arises from mishandling of authentication, enabling a remote attacker to execute arbitrary commands by leveraging access to a different NetWorker instanc...

EMC NetWorker < 8.0.4.4 / 8.1.x < 8.1.3.6 / 8.2.x < 8.2.2.2 / 9.0.x < 9.0.0.2 RPC Authentication DoS

The version of EMC NetWorker installed on the remote Windows host is prior to 8.0.4.5, 8.1.x prior to 8.1.3.6, 8.2.x prior to 8.2.2.2, or 9.0.x prior to 9.0.0.2. It is, therefore, affected by a denial of service vulnerability due to improper handling of malformed RPC authentication requests. An...

EMC NetWorker RPC Authentication Message Handling Remote Denial of Service Vulnerability

EMC NetWorker is an application that supports disk backup, data replication, continuous data protection and deduplication. A security vulnerability in the EMC NetWorker RPC authentication messages allows remote attackers to exploit the vulnerability to submit a special request to cause the...

CVE-2015-6849

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service process outage via malformed RPC authentication messages...

Authentication flaw

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service process outage via malformed RPC authentication messages...