4922 matches found
EMC HomeBase Server Directory Traversal Remote Code Execution
$Id: emchomebaseexec.rb 12458 2011-04-27 20:29:27Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
EMC HomeBase Server Directory Traversal Remote Code Execution
Exploit for windows platform in category remote exploits $Id: emchomebaseexec.rb 12458 2011-04-27 20:29:27Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
EMC HomeBase Server - Directory Traversal Remote Code Execution (Metasploit)
$Id: emchomebaseexec.rb 12458 2011-04-27 20:29:27Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
CVE-2011-1422
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2011-1421
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Design/Logic Flaw
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...
CVE-2011-1421
EMC NetWorker 7.5.x (before 7.5.4.3) and 7.6.x (before 7.6.1.5) are affected when the client push feature is enabled. The issue is weak permissions set on an unspecified file, enabling local users to gain elevated privileges. Exploitation details are not provided in the sources. Remediation is to...
CVE-2011-1422
CVE-2011-1422 is an XSS vulnerability in an unspecified Shockwave Flash file used by EMC RSA Adaptive Authentication On-Premise (AAOP) versions 2.x, 5.7.x and 6.x. The affected component is the Flash/Shockwave content within AAOP; the root cause is an input/validation issue allowing arbitrary web...
CVE-2011-1421
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...
CVE-2011-1422
Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
ESA-2011-013: EMC NetWorker arbitrary code execution with elevated privileges vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-013: EMC NetWorker arbitrary code execution with elevated privileges vulnerability. EMC Identifier: ESA-2011-013 CVE Identifier: CVE-2011-1421 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC SW: EMC...
EMC Networker weak permissions
Weak permissions for executable file...
EMC RSA Adaptive Authenticatio crossite scripting
Flash file crossite scripting...
ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication (On-Premise) Flash File Security Patch
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication On-Premise Flash File Security Patch Advisories Updated April 14, 2011 Summary: A potential cross-site scripting vulnerability has been identified in RSA...
EMC Buys Security Firm NetWitness
UPDATE: Call it ‘dancing with the girl that brought ‘ya,’: two weeks after it disclosed a serious security breach at its RSA Security Division, tech firm EMC said it was buying NetWitness, a threat analysis firm that helped it detect the breach in the first place. EMC said on Monday that it had...
ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications. EMC Identifier: ESA-2011-012 CVE Identifier: CVE-2011-0647 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC NetWorker Module f...
EMC Replication Manager code execution
Command execution via TCP/6542 service...
EMC Data Protection Advisor Collector for Solaris SPARC不安全文件权限漏洞
Bugtraq ID: 47036 CVE ID：CVE-2011-1420 EMC Data Protection Advisor Collector是一款数据备份报告工具。 Solaris SPARC平台下的EMC Data Protection Advisor Collector不正确设置文件权限，本地攻击者可以利用漏洞以目标用户安全上下文执行任意代码，可导致特权提升。 EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1 EMC Data Protection Advisor Collector for...