CVE-2016-0909

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

Design/Logic Flaw

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

CVE-2016-0909

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users...

CVE-2016-0909

Affected products: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) prior to 7.3.0 Hotfix 263301 (7.3.0.233). Issue: Local privilege escalation vulnerability allowing an attacker to execute arbitrary PostgreSQL commands on the remote host and gain elevated privileges. Root cause / vec...

EMC vApp Manager Detection

Binary data emcvappmanagerdetect.nbin...

EMC Solutions Enabler Virtual Appliance 8.x < 8.3.0 RCE

The version of EMC Solutions Enabler Virtual Appliance running on the remote host is 8.x prior to 8.3.0. It is, therefore, affected by multiple vulnerabilities : - Multiple flaws exist in the web interface related to the GeneralCmdRequest, PersistantDataRequest, and GetCommandExecRequest classes...

EMC Unisphere for VMAX Virtual Appliance 8.x < 8.3.0 RCE

The version of EMC Unisphere for VMAX Virtual Appliance running on the remote host is 8.x prior to 8.3.0. It is, therefore, affected by multiple vulnerabilities : - Multiple flaws exist in the web interface related to the GeneralCmdRequest, PersistantDataRequest, and GetCommandExecRequest classes...

EMC Legato Networker Remote Exec Service Stack Overflow RCE

The EMC Legato Networker application running on the remote host is affected by a stack overflow condition in the Networker Remote Exec Service nsrexecd.exe, specifically within the sprintf function, when handling poll or kill requests. An unauthenticated, remote attacker can exploit this, via a...

CVE-2016-6646

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

Design/Logic Flaw

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

Design/Logic Flaw

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...

Design/Logic Flaw

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...

CVE-2016-6645

The CVE-2016-6645 entry applies to EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance 8.x prior to 8.3.0. The vulnerability stems from the vApp Manager’s web interface, where crafted input to GeneralCmdRequest, PersistantDataRequest, or GetCommandExecRequest allows a...

CVE-2016-6645

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...

CVE-2016-0913

The CVE-2016-0913 entry affects EMC Replication Manager (RM) and related modules: RM before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6. The vulnerability allows remote RM servers to execute arbitrary commands by placin...

CVE-2016-0913

The client in EMC Replication Manager RM before 5.5.3.001-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share...