CVE-2014-2959

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 641G.GS103 and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 646G.GS002 allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter...

CVE-2014-2959

The CVE-2014-2959 issue affects Dell ML6000 and Quantum Scalar i500 tape libraries. The remote pre-authentication vulnerability stems from logViewer.htm, where a pathname parameter is used directly in shell commands, allowing command execution via metacharacters. Affected firmwares are Dell i8.2....

Tape Jobs fail with I/O errors or (SCSI) Bus resets

Challenge Failures occur during the File to tape or Backup to tape jobs. The jobname.log shows error messages similar to: error: The request could not be performed because of an I/O device error error: Tape fatal error.\nThe I/O bus was reset Cause Depending on the type of connection, controller ...

Unable to retrieve next block transmission command when backing up to tape from a Linux repository

Challenge When backing up to tape from a Linux repository, the following error may appear: Unable to retrieve next block transmission command. Number of already processed blocks: number of blocks. The log file contains the following information: cli| WARN|Tape Default EOM Warning 2147483648!...

A Duplicate Tape Library is shown in the UI and is offline

Challenge A Tape Library with user-created media pools is shown as "offline ", and a duplicate of the Tape Library, without media pools is shown online instead. This KB article applies only to versions of Veeam Backup & Replication prior to 9.0.x Cause This issue may occur when changing device...

Release Information for Veeam Backup & Replication 7 Patch 3

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Veeam Backup & Replication Patch 3 Release Notes Cause Please confirm you are running version 7.0.0.690, 7.0.0.715, 7.0.0.764, 7.0.0.771 or 7.0.0.833 prior t...

Tape library and drives are shown as separate devices

Challenge Tape library and drives are shown as separate devices in console or loading tape into TapeDrive0 moves the tape into TapeDrive1 etc. Shown here, the Tape Library has no Tape Drive listed Shown here, the Tape Drive is separate from the Tape Library. Cause The tape library is not reportin...

Release Information for Veeam Backup & Replication 7 R2 Update

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 7.0 R2а update Cause Please confirm you are running version 7.0.0.690, 7.0.0.715 or 7.0.0.764 prior to installin...

Prevent Veeam from locking tape drives

Challenge Veeam periodically rescans the tape drives. This locks the drives and prevents other tape software from writing to them. Cause The refresh rate on the automatic rescan is too frequent if using third party tape backup software. Solution The registry keys below prevent Veeam Backup &...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

CVE-2009-2695 kernel: SELinux and mmapminaddr CVE-2009-3228 kernel: tc: uninitialised kernel memory leak CVE-2009-3286 kernel: OEXCL creates on NFSv4 are broken CVE-2009-2908 kernel ecryptfs NULL pointer dereference CVE-2009-3613 kernel: flood ping cause out-of-iommu error and panic when mtu larg...

Code injection

Unspecified vulnerability in the web interface on the IBM TS3500 Tape Library with firmware before C260 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2012-5767

The affected product is IBM TS3500 Tape Library with the web UI. The vulnerability (CVE-2012-5767) exists in firmware versions lower than C260 and could allow an authenticated remote user to gain higher privileges via unspecified vectors. IBM’s security bulletin specifies that applying firmware v...

CVE-2012-5767

Unspecified vulnerability in the web interface on the IBM TS3500 Tape Library with firmware before C260 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2012-1843

Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...

CVE-2012-1842

Cross-site scripting XSS vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to inject arbitrary web script or HTML vi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...

Cross site scripting

Cross-site scripting XSS vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to inject arbitrary web script or HTML vi...

CVE-2012-1842

CVE-2012-1842 affects Quantum Scalar i500 (and rebranded/Dell ML6000, IBM TS3310) web interface. The vulnerability is a cross-site scripting flaw in checkQKMProg.htm that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected firmware versions: Quantum i500 befo...

CVE-2012-1844

CVE-2012-1844 affects Quantum Scalar i500, Dell ML6000, and IBM TS3310 tape libraries. Firmware before i7.0.3 (604G.GS00100) for i500, before A20-00 (590G.GS00100) for ML6000, and before R6C (606G.GS001) for TS3310 contains pre-configured default accounts with fixed passwords, enabling remote acc...

CVE-2012-1843

The CVE-2012-1843 issue affects Quantum Scalar i500 (and rebranded Dell ML6000/IBM TS3310) web interface: a CSRF in saveRestore.htm allows an authenticated remote user to cause execution of Linux commands via the fileName parameter, effectively hijacking user authentication and potentially runnin...