EMC Secure Remote Services Virtual Edition Command Injection Vulnerability

EMC Secure Remote Services Virtual Edition ESRS VE is a suite of Remote Services Virtual Edition software from EMC Corporation used to provide bi-directional remote connectivity between EMC customer service and end-user EMC products and solutions. A command injection vulnerability exists in EMC...

Command injection vulnerability in EMC Secure Remote Services Virtual Edition

------------------------------------------------------------------------ Command injection vulnerability in EMC Secure Remote Services Virtual Edition ------------------------------------------------------------------------ Han Sahin, November 2014...

ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities CVE Identifier: CVE-2015-0235, CVE-2015-0524, CVE-2015-0525 Severity Rating: CVSSv2 Base Score: See below for individual scores for each CVE Affected...

EMC Secure Remote Services Virtual Edition Gateway Provisioning Service Operating System Command Injection Vulnerability

EMC Secure Remote Services Virtual Edition ESRS VE is a suite of EMC Secure Remote Services Virtual Edition software used to provide bi-directional remote connectivity between EMC customer service and end-user EMC products and solutions. A security vulnerability exists in the Gateway Provisioning...

CVE-2015-0524

The ESRS VE Gateway Provisioning service (EMC Secure Remote Services Virtual Edition) versions 3.02 and 3.03 contain a SQL injection vulnerability (CVE-2015-0524). The vulnerability, described across multiple sources, allows a remote attacker to retrieve arbitrary data, interfere with application...

CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4624

EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x up to 7.0.2-43 expose MCUser and GSAN passwords via Java API calls without authentication (remote information disclosure). VMware vSphere Data Protection (VDP) 5.x also vulnerable via Java API access to retrieve credential...

CVE-2014-4623

EMC Avamar ADS GEN4(S) and Avamar Virtual Edition (AVE) versions 6.0.x, 6.1.x, and 7.0.x are affected when the Password Hardening package is installed prior to 2.0.0.4. The issue stems from using UNIX DES crypt for password hashing, enabling context-dependent attackers to recover cleartext passwo...

CVE-2014-4624

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

F5 Networks BIG-IP : SSH vulnerability (K13600)

A platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using secure shell SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. The following platforms a...

Security Gateway Virtual Edition (VE) VMWare OVF template security update

...

CVE-2013-3275

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilitie...

CVE-2013-3274

EMC Avamar Server and Avamar Virtual Edition before version 7.0 on Data Store Gen3, Gen4, and Gen4s hardware are affected by CVE-2013-3274 due to improper authorization checks on Java RMI calls. This potentially allows remote authenticated users to execute arbitrary code via unspecified vectors. ...

F5 BIG-IP remote root authentication bypass Vulnerability

A platform-specific remote root access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a publicly known SSH private key for the root user which is present on all vulnerable appliances. The...