CVE-2012-0397

Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

Buffer overflow

Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2012-0397

Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2012-0397

The CVE-2012-0397 issue affects RSA SecurID Software Token Converter prior to version 2.6.1. A boundary/buffer overflow in the converter (notably when processing XML-formatted .sdtid strings) can be triggered remotely, potentially causing a denial of service or, in some cases, executing arbitrary...

broadcast-networker-discover NSE Script

Discovers EMC Networker backup software servers on a LAN by sending a network broadcast query. Script Arguments mount.version, nfs.version, rpc.protocol See the documentation for the rpc library. Example Usage nmap --script broadcast-networker-discover Script Output Pre-scan script results: |...

ndmp-version NSE Script

Retrieves version information from the remote Network Data Management Protocol ndmp service. NDMP is a protocol intended to transport data between a NAS device and the backup device, removing the need for the data to pass through the backup server. The following products are known to support the...

ndmp-fs-info NSE Script

Lists remote file systems by querying the remote device using the Network Data Management Protocol ndmp. NDMP is a protocol intended to transport data between a NAS device and the backup device, removing the need for the data to pass through the backup server. The following products are known to...

Multiple Cisco Products brstart sm_read_string_length Remote Code Execution

Binary data ciscousmlmsbof.nbin...

EMC SMARTS Application Server Detection

Binary data emcsmartsdetect.nbin...

EMC RSA enVision information leakage

It's possible to obtain environment variables values...

ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision Advisories Updated January 25, 2012 Summary: RSA, The Security Division of EMC, announces security fixes to address a security vulnerability and provide an...

Default Password (nasadmin) for 'nasadmin' Account

The account 'nasadmin' on the remote host has the password 'nasadmin'. An attacker may leverage this to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "nasadmin"; password = "nasadmin"; include'deprecatednasllevel.inc'; include'compat.inc...

EMC Celerra Control Station Default Credentials

The remote host appears to be an EMC Celerra control station. Such devices come with two well known default credentials which give full control on the configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

EMC Networker buffer overflow

Buffer overflow on RPC request parsing in indexd.exe...

ESA-2012-005: EMC NetWorker buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-005: EMC NetWorker buffer overflow vulnerability. EMC Identifier: ESA-2012-005 EMC Identifier: NW135173 CVE Identifier: CVE-2012-0395 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC NetWorker Server...

ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability. EMC Identifier: ESA-2012-009 EMC Identifier: CS-16072 EMC Identifier: CS-16073 CVE Identifier: CVE-2011-4144 Severity Rating: CVSS v2 Base Score: 6.8...

ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution http://www.zerodayinitiative.com/advisories/ZDI-12-025 February 8, 2012 - -- CVE ID: CVE-2012-0395 - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors: EMC - -...

EMC Documentum Content Server privilege escalation

System administrator can elevate privileges to super-user...

EMC Documentum xPlore information leakage

Under specific circumstances, an authenticated user who does not have BROWSE permission on the object may be able to see the existence of or certain metadata on that object in a search result...

EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Networker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way the indexd.exe handles rpc calls with opcode 0x1 for program 0x0005F3D9. While...