EMC SourceOne DoS

Management account lockout is possible...

Default credentials

EMC RSA Identity Management and Governance IMG 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account...

CVE-2015-0532

EMC RSA Identity Management and Governance IMG 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account...

CVE-2015-0532

EMC RSA Identity Management and Governance IMG 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account...

CVE-2015-0532

RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 are affected by an insecure password reset vulnerability where a weakness in the password reset process may allow an attacker to gain access by submitting a reset operation for an arbitrary legitimate account name. P...

EMC AutoStart is vulnerable to remote code execution via specially crafted packets

Overview EMC AutoStart, version 5.5.0 and earlier, is vulnerable to remote command execution via specially crafted packets. Description EMC AutoStart is an enterprise software application developed to help networks and service maintain a high level of availability. AutoStart can manage clusters o...

EMC NetWorker nsr_render_log Local Privilege Escalation

The EMC NetWorker installed on the remote Windows host is a version prior to 8.0.4.3, or version 8.1.x prior to 8.1.2.6, or 8.2.x prior to 8.2.1.2 . It is, therefore, affected by a buffer overflow flaw in the nsrrenderlog command-line interface. A local attacker can exploit this to execute...

CVE-2015-0530

Buffer overflow in an unspecified function in nsrrenderlog in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors...

Buffer overflow

Buffer overflow in an unspecified function in nsrrenderlog in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors...

CVE-2015-0530

EMC NetWorker is affected by a buffer overflow in the nsr_render_log utility that allows local privilege escalation. Affected releases include 8.0.4.3 and earlier, 8.1.x prior to 8.1.2.6, and 8.2.x prior to 8.2.1.2. The root cause is an unsafe function usage in nsr_render_log, enabling local user...

CVE-2015-0530

Buffer overflow in an unspecified function in nsrrenderlog in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors...

EMC NetWorker buffer overflow

nsrrenderlog buffer overflow...

ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability EMC Identifier: ESA-2015-069 CVE Identifier: CVE-2015-0530 Severity Rating: CVSS v2 Base Score: 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C Affected products: • All versions of NetWorker prior to the...

EMC PowerPath backdoor account

EMC PowerPath vApp undocumented account...

ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability EMC Identifier: ESA-2015-056 CVE Identifier: CVE-2015-0529 Severity Rating: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N Affected products: • EMC PowerPath...

Default credentials

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...

CVE-2015-0529

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...

CVE-2015-0529

EMC PowerPath Virtual Appliance (vApp) prior to version 2.0 is vulnerable due to undocumented accounts emcupdate and svcuser protected by default passwords, enabling potential information disclosure via login sessions. Affected product/version: EMC PowerPath Virtual Appliance (vApp) before 2.0. R...

CVE-2015-0529

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...

EMC Isilon OneFS Elevation of Privilege Vulnerability

EMC Isilon OneFS is a distributed file system from EMC Corporation that supports EMC Isilon horizontally scalable storage systems. An elevation of privilege vulnerability exists in EMC Isilon OneFS, which can be exploited by local users to gain privileges by modifying system files...