4746 matches found
Design/Logic Flaw
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file...
CVE-2011-1742
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file...
CVE-2011-1742
CVE-2011-1742 affects EMC Data Protection Advisor prior to 5.8.1, where cleartext account credentials may be written into the DPA configuration file, potentially readable by local users. The issue is documented across multiple sources (NVD entry; EMC advisories) and is limited to situations in wh...
CVE-2011-1742
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file...
EMC Data Protection Advisor information leakage
Cleartext passwords are stored in user readable files...
ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability. EMC Identifier: ESA-2011-021 CVE Identifier: CVE-2011-1742 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: EMC SW: EMC Dat...
PGP Website - Multiple Cross Site Scripting Vulnerabilities
Document Title: =============== PGP Website - Multiple Cross Site Scripting Vulnerabilities Release Date: ============= 2011-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 95 Product & Service Introduction: =============================== PGP Corporation is a global...
Morgan Stanley Smith Barney Breach Loses Information of 34,000
Retail brokerage Morgan Stanley Smith Barney MSSB has notified 34,000 investment clients that some of their data has been lost, including their names, addresses, social security numbers, tax identification numbers and investment income from 2010, according to a report on the Dow Jones newswires...
U.S. Playing Catch Up in Security for Contactless Devices
AMHERST, MASS.– The U.S. may boast the world’s largest economy, richest technology companies and a lion’s share of its top research universities. But when it comes to the subject of security of RFID Radio Frequency ID and other contactless technologies, America is still playing catch-up. The U.S....
Mobile Security – Users Just Don't Care
It’s not that users “don’t want to keep their data safe”. They do. Most corporate users don’t want their personal or corporate, private information, available to someone else. They don’t want their email stolen or their contacts pillaged. So why do people insist on ignoring the multitude of...
CitiBank hacked & large number of customer data stolen
CitiBank hacked & large number of customer data stolen Security breaches happen, they're going to continue to happen … the mission of the banking industry is to keep the customer base safe and customers feeling secure about their financial transactions and payments Citigroup said today that hacke...
Trinity College Dublin Reports Data breach !
Trinity College Dublin Reports Data breach ! A file containing the names of students and staff of Trinity College Dublin, along with their addresses, ID numbers and email addresses, was "inadvertently" made accessible on a local network, the college said. TCD said today it had reported the incide...
Barracuda Networks Hacking via SQL Injection !
Barracuda Networks Hacking via SQL Injection ! Barracuda Networks Inc. combines premises-based gateways and software, virtual appliances, cloud services, and sophisticated remote support to deliver comprehensive content security, data protection and application delivery solutions. The company's...
EMC Data Protection Advisor Collector for Solaris SPARC不安全文件权限漏洞
Bugtraq ID: 47036 CVE ID：CVE-2011-1420 EMC Data Protection Advisor Collector是一款数据备份报告工具。 Solaris SPARC平台下的EMC Data Protection Advisor Collector不正确设置文件权限，本地攻击者可以利用漏洞以目标用户安全上下文执行任意代码，可导致特权提升。 EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1 EMC Data Protection Advisor Collector for...
CVE-2011-1420
EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...
Code injection
EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...
CVE-2011-1420
EMC Data Protection Advisor Collector for Solaris SPARC (version 5.7 and 5.7.1) contains incorrect/weak file permissions that allow a local attacker to execute code with elevated privileges. Affected builds 5.7 and 5.7.1 require Patch/DPA-8873; EMC notes that Build 5833 for both 5.7 and 5.7.1 res...
CVE-2011-1420
EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...
ESA-2011-010: EMC Data Protection Advisor Collector arbitrary code execution with elevated privileges vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-010: EMC Data Protection Advisor Collector arbitrary code execution with elevated privileges vulnerability EMC Identifier: ESA-2011-010 CVE Identifier: CVE-2011-1420 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected...