75 matches found
EMC AlphaStor Device Manager Detection
The remote host is running a EMC AlphaStor Device Manager service. AlphaStor is a tape backup management and library sharing for EMC NetWorker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid33283;...
EMC AlphaStor Device Manager robotd RCE
The AlphaStor Device Manager application running on the remote host is affected by a remote command execution vulnerability in robotd due to improper sanitization of packet string arguments before using them in a call to the 'system' function. An unauthenticated, remote attacker can exploit this,...
EMC AlphaStor Library Manager Remote Code Execution
The installed instance of AlphaStor Library Manager is vulnerable to a command execution flaw when it receives a packet with a 0x44 code. Packet string argument is used unsanitized as a call to the 'system' function. An unauthenticated, remote attacker may be able to exploit this flaw to execute...
DSquare Exploit Pack: D2SEC_ALPHASTOR_LM
Name| d2secalphastorlm ---|--- CVE| CVE-2008-2157 Exploit Pack| D2ExploitPack Description| EMC AlphaStor Library Manager Remote Command Execution Vulnerability Notes|...
CVE-2008-2157
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500...
Stack overflow
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025...
Design/Logic Flaw
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500...
CVE-2008-2157
The provided connected documents confirm a remote command-execution vulnerability (CVE-2008-2157) in EMC AlphaStor products. The EMC AlphaStor Library Manager is vulnerable to arbitrary command execution via an unsanitized packet string argument that is processed by a system() call when handling ...
CVE-2008-2158
EMC AlphaStor 3.1 SP1 for Windows is affected by multiple stack-based buffer overflows in the Server Agent’s Command Line Interface process. The vulnerability (CVE-2008-2158) allows remote code execution by sending specially crafted TCP packets to port 41025. Several public references (including ...
CVE-2008-2158
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025...
iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities
iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website at the following URL...
EMC AlphaStor库管理器任意命令执行漏洞
CVECAN ID: CVE-2008-2157 AlphaStor是用于管理磁盘的应用程序组件。 AlphaStor中库管理器（Library Manager）用于管理在分布的位置上替换磁盘驱动。该管理器由单个进程robotd组成，在TCP 3500端口上监听入站连接。 如果对库管理器发送了特殊请求的话，robotd会使用报文中的字符串在系统上通过CreateProcess函数执行命令，这允许攻击者在主机上以SYSTEM权限执行任意程序。 EMC AlphaStor 3.1 SP1 for Windows EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...
iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability
iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website found at the following link...