EUVD-2014-4546

Malware in sbrugna...

CVE-2016-0913: Improper Input Validation

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2014-4620: Exposure of Sensitive Information to an Unauthorized Actor

The EMC NetWorker Module for MEDITECH aka NMMEDI 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files...

PT-2014-6027

Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for MEDITECH aka NMMEDI versions 3.0 build 87 through 3.0 build 90 Description The issue allows local users to obtain sensitive information by reading log files. Specifically, when EMC RecoverPoint and Plink are used,...

EMC Replication Manager Command Execution Vulnerability

This Metasploit module exploits a remote command-injection vulnerability in EMC Replication Manager client irccd.exe. By sending a specially crafted message invoking RunProgram function an attacker may be able to execute arbitrary code commands with SYSTEM privileges. Affected products are EMC...

CVE-2012-2290

The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...

CVE-2012-2284

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

PT-2012-3929

Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for Microsoft Applications NMM versions 2.2.1, 2.3 before build 122, 2.4 before build 375 Description The issue allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channe...

PT-2012-3923

Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for Microsoft Applications NMM versions 2.2.1 through 2.3 before build 122 EMC NetWorker Module for Microsoft Applications NMM versions 2.4 before build 375 Description The issue affects the install and upgrade processes i...

CVE-2012-2284: Undefined Security Weakness

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

CVE-2012-2290: Improper Control of Generation of Code

The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...

ESA-2012-025: EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities

ESA-2012-025.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-025: EMC NetWorker Module for Microsoft Applications NMM Multiple Vulnerabilities. EMC Identifier: ESA-2012-025 CVE Identifier: CVE-2012-2284,CVE-2012-2290 Severity Rating: See below for individual severity scores EMC...

ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications. EMC Identifier: ESA-2011-012 CVE Identifier: CVE-2011-0647 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC NetWorker Module f...

EMC Replication Manager Command Execution

This module exploits a remote command-injection vulnerability in EMC Replication Manager client irccd.exe. By sending a specially crafted message invoking RunProgram function an attacker may be able to execute arbitrary commands with SYSTEM privileges. Affected products are EMC Replication Manage...