PT-2016-4464

Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.5 through 5.5.4.0 EMC Data Domain OS versions 5.6 through 5.6.1.004 EMC Data Domain OS versions 5.7 through 5.7.2.0 Description The issue allows local users to hijack arbitrary accounts due to the storage of sessi...

CVE-2016-0910: Undefined Security Weakness

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...

Backup to Data Domain fails with “Error: calling system(), returns nonzero. Err: 5040 Failed to connect to storage.”

Challenge During the "preparing storage for backup" phase of a Veeam backup job to a Data Domain, the job fails, displaying the following error message: Error: calling system, returns nonzero. Err: 5040 Failed to connect to storage Cause The Data Domain chooses to use a different NIC than...

Adding DDboost repository results in error 5049 or 5037

When attempting to add an EMC Data Domain repository, one of the following errors is received:Illegal operation. Err: 5037Failed to connect to '\datadomain'.ORUnable to connect to Data Domain...

Cannot restore to the backup repository host when storage VSP is enabled

Article Applicability Starting in Veeam Backup & Replication 12.1, this error will no longer occur due to internal coding changes. Challenge A Hyper-V Instant Recovery or SureBackup Job fails with the error message: Cannot restore to the backup repository host when storage VSP is enabled. Cause T...

Data loss risk with Backup Copy to Data Domain via DDBoost

Challenge Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss. Cause Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss due to Data Domain erroneously processing fi...

Release Notes for Veeam Backup & Replication 8.0 Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 1 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817 or 8.0.0.831 prior to installing...

PT-2014-5753

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.1 through 6.3.4 Description The issue affects confidentiality and is related to Data, Domain & Function Security. The exact nature of the vulnerability and the vectors used for exploitation are not...

CVE-2014-4234: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via unknown vectors related to Data, Domain & Function Security...

CVE-2014-0399: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Data, Domain & Function Security...

CVE-2014-0435: Undefined Security Weakness

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect availability via unknown vectors related to Data, Domain & Function Security...

Command injection

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

CVE-2007-1836

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

CVE-2007-1836

Affected product/summary: Data Domain OS

CVE-2007-1836: Undefined Security Weakness

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

CVE-2007-1836

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

Data Domain管理接口本地特权提升漏洞

Data Domain的DDX阵列系列是业界第一个企业数据中心级的基于“重复数据删除Deduplication＂技术数据保护阵列。 Data Domain传递数据到UNIX SHELL执行时不正确过滤用户输入，本地攻击者可以利用漏洞提升特权。 Data Domain管理接口的多个命令简单的调用UNIX命令，如ping, ifconfig, date, netstat, uptime等，传递给这些命令的参数缺少验证，通过特殊构建参数，可导致注入特殊SHELL字符而执行SHELL命令。 Data Domain Data Domain OS 3.0 Data Domain Data Domai...