CVE-2013-0930

Buffer overflow in Drive Control Program DCP in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors involving a new device name...

ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities EMC Identifier: ESA-2013-008 EMC Identifier: NW146708 CVE Identifier: CVE-2013-0928, CVE-2013-0929 Severity Rating: See below for individual severity scores Affected product: EMC AlphaStor 4.0 prior...

EMC AlphaStor security vulnerabilities

Command injection, format string vulnerability...

CVE-2013-0929

Format string vulnerability in the vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command...

CVE-2013-0928

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation...

Command injection

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation...

Format string

Format string vulnerability in the vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command...

CVE-2013-0929

Format string vulnerability in the vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command...

CVE-2013-0928

CVE-2013-0928 affects EMC AlphaStor, specifically the Device Manager process rrobotd.exe. The vulnerability is a remote command injection flaw exposed via the DCP run command, caused by improper input handling. Versions prior to 4.0 Build 800 are vulnerable; upgrading to 4.0 Build 800 or later is...

CVE-2013-0928

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation...

CVE-2013-0929

CVE-2013-0929 is a format-string vulnerability in EMC AlphaStor’s Device Manager (rrobotd.exe) that processes incoming commands. The issue arises in the _vsnsprintf function, allowing a remote attacker to execute arbitrary code via format string specifiers. Industry advisories document remote exp...

EMC AlphaStor Device Manager Opcode 0x75 Command Injection

This module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary command injection. This module has been tested successfully on EMC AlphaStor 4.0 build 116 with Windows 2003 SP2 and...

EMC AlphaStor Agent - Remote Buffer Overflow (Metasploit)

$Id: alphastoragent.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

EMC AlphaStor Agent Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'EMC AlphaStor Age...

EMC AlphaStor Library Manager Arbitrary Command Execution

EMC AlphaStor Library Manager is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

EMC AlphaStor Library Manager Service

This module queries the remote host for the EMC Alphastor Library Management Service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'EMC AlphaStor Library Manager Service', 'Description' = 'Th...

EMC AlphaStor Device Manager Service

This module queries the remote host for the EMC Alphastor Device Management Service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'EMC AlphaStor Device Manager Service', 'Description' = 'This...

EMC AlphaStor Device Manager Arbitrary Command Execution

EMC AlphaStor Device Manager is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

EMC AlphaStor Agent Buffer Overflow

This module exploits a stack buffer overflow in EMC AlphaStor 3.1. By sending a specially crafted message, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

EMC AlphaStor Library Manager Detection

The remote host is running a EMC AlphaStor Library Manager service. AlphaStor is a tape backup management and library sharing for EMC NetWorker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid33280;...