Design/Logic Flaw

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

CVE-2012-2281

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

CVE-2012-2281

CVE-2012-2281 affects EMC RSA Access Manager Server 6.x (before 6.1 SP4) and RSA Access Manager Agent. The root cause is improper invalidation/validation of session tokens after a user logs out, which can let an attacker replay a valid session via unspecified vectors. The impact is that remote at...

CVE-2012-2515

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

CVE-2012-2515

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

CVE-2012-2515

CVE-2012-2515 describes multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control (KeyHelp.ocx 1.2.312) in the KeyWorks KeyHelp Module (HTML Help component). The flaws allow remote code execution via a long string passed to the (1) JumpMappedID or (2) JumpURL methods, affecti...

EMC Data Protection Advisor Denial of Service

A denial of service vulnerability has been reported in EMC Data Protection Advisor...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

Buffer overflow

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

CVE-2012-0409

The CVE-2012-0409 issue affects EMC AutoStart, specifically the ftAgent component. The vulnerability stems from parsing routines for op-codes in EMC AutoStart ftAgent’s network protocol, where values read from the network are used in memory size calculations without validation. This can cause int...

ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-020: EMC AutoStart Multiple Buffer Overflow Vulnerabilities. EMC Identifier: ESA-2012-020 CVE Identifier: CVE-2012-0409 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC AutoStart 5.3.x EMC AutoStart...

CVE-2012-2277

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

CVE-2012-2276

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

Design/Logic Flaw

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

Null pointer dereference

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2276

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2276

CVE-2012-2276 affects EMC Documentum Information Rights Management (IRM) Server 4.x (before 4.7.0100) and 5.x (before 5.0.1030). The vulnerability is a NULL pointer dereference in the IRM Server when processing input data that (1) lacks FIPS fields or (2) has an invalid version number, leading to...

CVE-2012-2277

CVE-2012-2277 affects EMC Documentum Information Rights Management (IRM) Server 4.x before 4.7.0100 and 5.x before 5.0.1030. A DoS condition arises when remote attackers send newline characters in Id fields of multiple batch begin untethered commands, causing pvcontrol.exe to hang. Impact is a de...

CVE-2012-2277

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...