EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet RCE

EMC Data Protection Advisor version 5.8 sp5 suffers from a DPA Illuminator EJBInvokerServlet remote code execution vulnerability. Proof of concept code included. vulnerability: the "DPA Illuminator" service DPAIlluminator.exe listening on public port 8090 tcp/http and 8453 tcp/https is vulnerable...

EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution

EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution EMC Data Protection Advisor DPA Illuminator EJBInvokerServlet Remote Code Execution tested against: Microsoft Windows Server 2008 r2 sp1 EMC Data Protection Advisor 5.8 sp5 vulnerability: the "DPA Illuminator"...

EMC Data Protection Advisor Web UI Directory Traversal

According to its build date, the EMC Data Protection Advisor Web UI on the remote host is affected by a directory traversal vulnerability that may allow a remote, unauthenticated attacker to copy and read files from the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2012-4616

CVE-2012-4616 affects EMC Data Protection Advisor (DPA) Web UI. A directory traversal vulnerability in the DPA Web UI enables remote attackers to copy/read arbitrary files from the server. Affected products/versions include DPA 5.6 (SP1), 5.7 (SP1), and 5.8 (SP1–SP4). The root cause is a Web UI d...

CVE-2012-0407

CVE-2012-0407 : In EMC Data Protection Advisor (DPA) 5.5–5.8 SP1, an integer overflow can occur in the DPA_Utilities library when a negative 64-bit value is used in a particular size field, leading to a denial of service (infinite loop). The issue is separate from a NULL pointer dereference (CVE-...

CVE-2012-0406

EMC Data Protection Advisor (DPA) 5.5–5.8 SP1 contains a NULL pointer dereference DoS in DPA_Utilities.cProcessAuthenticationData triggered by AUTHENTICATECONNECTION without a password or with an empty password. Exploitation can crash the daemon. The public disclosures (ESA-2012-018) indicate a S...

CVE-2011-1742

CVE-2011-1742 affects EMC Data Protection Advisor prior to 5.8.1, where cleartext account credentials may be written into the DPA configuration file, potentially readable by local users. The issue is documented across multiple sources (NVD entry; EMC advisories) and is limited to situations in wh...