CVE-2017-8022

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

CVE-2017-8022

Summary: CVE-2017-8022 affects EMC NetWorker Server (nsrd). A buffer overflow in nsrd exists on affected versions: prior to 8.2.4.9, all 9.0.x, prior to 9.1.1.3, and prior to 9.2.0.4. Exploitation could be remote and unauthenticated, potentially allowing arbitrary code execution or a denial of se...

CVE-2017-8022: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in EMC NetWorker prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4. The Server service nsrd is affected by a buffer overflow vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary co...

EMC NetWorker Buffer Overflow Vulnerability

EMC NetWorker Server contains a buffer overflow vulnerability that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 8.2.4.9, 9.0.x all supported versions, prior to 9.1.1.3, and prior to 9.2.0.4 are affected. EMC NetWorker Buffer Overflow...

EMC NetWorker Buffer Overflow Vulnerability (CNVD-2017-32224)

EMC NetWorker is a suite of unified backup and recovery software from EMC. The software provides backup and recovery, deduplication elimination, backup reporting, and more. A buffer overflow vulnerability exists in the Server service nsrd in EMC NetWorker. A remote attacker could exploit this...

EMC Legato Networker Remote Exec Service Stack Overflow RCE

The EMC Legato Networker application running on the remote host is affected by a stack overflow condition in the Networker Remote Exec Service nsrexecd.exe, specifically within the sprintf function, when handling poll or kill requests. An unauthenticated, remote attacker can exploit this, via a...

EMC Replication Manager and EMC Networker Module for Microsoft Remote Code Execution Vulnerability

EMC Replication Manager RM and so on are the products of the United States EMC EMC. RM is a set of EMC storage arrays in the data replication products provide an integrated management platform software; EMC Networker Module for Microsoft NMM is a set of Microsoft applications for the provision of...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

Design/Logic Flaw

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2016-0913

The CVE-2016-0913 entry affects EMC Replication Manager (RM) and related modules: RM before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6. The vulnerability allows remote RM servers to execute arbitrary commands by placin...

CVE-2016-0913: Improper Input Validation

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

EMC NetWorker 8.2.1.x < 8.2.2.6 / 9.0.x < 9.0.0.6 RCE

The version of EMC NetWorker installed on the remote Windows host is 8.2.1.x prior to 8.2.2.6 or 9.0.x prior to 9.0.0.6. It is, therefore, affected by a remote code execution vulnerability due to improper handling of authentication. An unauthenticated, remote attacker can exploit this to execute...

EMC NetWorker Arbitrary Command Execution Vulnerability

EMC NetWorker, previously known as Legato NetWorker, is a cross-platform backup and recovery system. EMC NetWorker versions 8.2.1.x, 8.2.2.x 8.2.2.6 and 9.x 9.0.0.6 have an authentication processing error that could allow a remote attacker to execute arbitrary commands by accessing a different...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

Design/Logic Flaw

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916

EMC NetWorker is affected by CVE-2016-0916. Affected versions are 8.2.1.x and 8.2.2.x before 8.2.2.6, and 9.x before 9.0.0.6. The vulnerability arises from mishandling of authentication, enabling a remote attacker to execute arbitrary commands by leveraging access to a different NetWorker instanc...

CVE-2016-0916

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...

CVE-2016-0916: Improper Authentication

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance...