7474 matches found
CVE-2008-0963
Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface...
CVE-2008-0961
EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface...
CVE-2008-0962
EMC DiskXtender 6.20.060’s File System Manager is affected by a stack-based buffer overflow in the RPC interface (UUID b157b800-aef5-11d3-ae49-00600834c15f) that can allow remote authenticated users to execute arbitrary code. The vulnerability arises from improper validation of string length in c...
CVE-2008-0963
EMC DiskXtender MediaStor 6.20.060 is affected by a format-string vulnerability in the RPC interface (UUID b157b800-aef5-11d3-ae49-00600834c15f). The service passes an unvalidated string to a formatting function, allowing remote authenticated users to execute arbitrary code with the privileges of...
CVE-2008-0961
EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface...
CVE-2008-0963
Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface...
CVE-2008-0961
EMC DiskXtender 6.20.060 (RPC interface) contains a hard-coded login and password that enables an unauthenticated remote attacker to bypass authentication and gain administrative access to the DiskXtender server. Affected component is DiskXtender’s RPC endpoints, enabling remote control and poten...
iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability
iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...
iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability
iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...
EMC DiskXtender默认凭据权限提升漏洞
BUGTRAQ ID: 28727 CVECAN ID: CVE-2008-0961 EMC DiskXtender是一款数据备份、迁移套件。 DiskXtender产品的主要组件包括文件系统管理器、MediaStor和证书服务器，这些组件都会创建可能远程访问的RPC端点。由于认证代码中包含有硬编码的登录和口令凭据，因此远程攻击者可以连接到这些RPC接口并使用这些凭据登录来绕过正常的认证过程，获得对DiskXtender服务器的管理访问。 EMC DiskXtender 6.20.60 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Computer Associates Alert Notification Buffer Overflow
This module exploits a buffer overflow in Computer Associates Threat Manager for the Enterprise r8.1 By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need valid logon...
CA Alert Notification服务多个RPC栈溢出漏洞
BUGTRAQ ID: 28605 CVECAN ID: CVE-2007-4620 Alert Notification Server是很多CA产品中都在使用的服务，用于向控制台用户提供通知。 Alert Notification服务在处理畸形格式的RPC请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Alert Notification服务以GUID...
Stack overflow
Multiple stack-based buffer overflows in Computer Associates CA Alert Notification Service Alert.exe 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote...
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates CA Alert Notification Service Alert.exe 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote...
CVE-2007-4620
CA Alert Notification Server (Alert.exe) in multiple CA products (Anti-Virus for the Enterprise, Threat Manager, BrightStor ARCserve Backup) is affected by a buffer overflow in the Alert Notification Service triggered by crafted RPC requests. CVE-2007-4620 affects CA Alert Notification components...
iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities
iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTrust Integrated Threat Management, to provide notifications to console users. II...
iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities
iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTrust Integrated Threat Management, to provide notifications to console users. II...
Solaris sadmind Command Execution
This exploit targets a weakness in the default security settings of the sadmind RPC application. This server is installed and enabled by default on most versions of the Solaris operating system. Vulnerable systems include solaris 2.7, 8, and 9 This module requires Metasploit:...
Sun Solaris 10 - rpc.ypupdated Remote Code Execution (Metasploit)
/ \ / \ | | | | ----====/ /\/ /\ | || |====---- | | | || | | | | | | | | | | | | | ------======\ / /| || || || |======------ / || || / Computer Academic Underground http://www.caughq.org Exploit Code ===============/======================================================== Exploit ID:...
Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit (meta)
Exploit for solaris platform in category remote exploits ========================================================== Sun Solaris ===============/======================================================== Description =========== This exploit targets a weakness in the way the ypupdated RPC application...