EMC NetWorker Installed

EMC NetWorker formerly Legato NetWorker, a suite of enterprise level data protection software, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62945; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

EMC RSA Data Protection Manager security vulnerabilities

Crossite scripting, restrictions bypass...

EMC NetWorker - Format String (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'EMC Networker Format String',...

EMC Networker Format String Vulnerability

This Metasploit module exploits a format string vulnerability in the lgsprintf function as implemented in liblocal.dll on EMC Networker products. This Metasploit module exploits the vulnerability by using a specially crafted RPC call to the program number 0x5F3DD, version 0x02, and procedure 0x06...

EMC Networker Format String

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'EMC Networker Format String',...

VMware的EMC Avamar Client "root"密码泄露安全漏洞

CVE ID: CVE-2012-4610 EMC Avamar是数据去重备份和恢复的解决方案。 EMC Avamar Client for VMware v6.1将根密码以明文形式保存代理客户端，具有代理客户端和Avamar服务器访问权限的恶意用户可利用此漏洞获取访问Avamar服务器的提升权限。 0 EMC Avamar 6.x 厂商补丁： EMC --- EMC已经为此发布了一个安全公告（40843）以及相应补丁，建议您尽快应用更新并更改现有的Avamar Server根用户密码: 40843：EMC Avamar Client for VMware 6.1.100-402...

CVE-2012-4610

EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...

Default credentials

EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...

CVE-2012-4610

EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...

CVE-2012-4610

EMC Avamar Client for VMware 6.1 stores the Avamar server root password in clear text on the proxy client. A user with network access to the proxy and Avamar server could obtain privileged access to the server. EMC issued a security advisory (40843) and hotfixes (e.g., 6.1.100-402) to address thi...

EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability

ESA-2012-053.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-053: EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2012-053 CVE Identifier: CVE-2012-4610 Severity Rating: CVSS v2 Base Score: 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C Affected Products...

EMC Avamar Client for VMware weak encryption

Server access password is stored locally in cleartext...

CVE-2012-2284

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

CVE-2012-2290

The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...

Code injection

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

Code injection

The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...

CVE-2012-2290

The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...

CVE-2012-2284

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

CVE-2012-2290

CVE-2012-2290 affects EMC NetWorker Module for Microsoft Applications (NMM) versions 2.2.1, 2.3 before build 122, and 2.4 before build 375. The issue arises from an unprotected TCP communication channel between NMM components, allowing a remote attacker to send a specially crafted message to a NM...

CVE-2012-2284

EMC NetWorker Module for Microsoft Applications (NMM) affects versions 2.2.1, 2.3 before build 122, and 2.4 before build 375. The Information Disclosure vulnerability (CVE-2012-2284) occurs when installing/upgrading on Microsoft Exchange Server, exposing cleartext administrator credentials after ...