EMC ApplicationXtender (KeyWorks) - ActiveX Control Buffer Overflow (Metasploit)

$Id: emcappextenderkeyworks.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSAR Authentication Client when storing secret key objects on an RSA SecurIDR 800 Authenticator

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSA® Authentication Client when storing secret key objects on an RSA SecurID® 800 Authenticator RSA Authentication Client...

EMC Celerra Network Attached Storage appliance unauthorized access

Full NFS access from predefined list of IP addresses is enabled by default...

ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing. EMC Identifier: ESA-2010-015 CVE Identifier: CVE-2010-2860 Severity Rating: CVSS v2 Base Score: 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C Affected products: EMC SW: NAS Code...

ESA-2010-014: RSA, The Security Division of EMC, releases security hot fixes for potential vulnerability in RSA® Access Manager Server under certain conditions.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-014: RSA, The Security Division of EMC, releases security hot fixes for potential vulnerability in RSA® Access Manager Server under certain conditions. Security Advisory Updated August 31, 2010 Summary: RSA Access Manager Server contains a...

ESA-2010-016: RSA, The Security Division of EMC, releases security hot fix for a potential vulnerability in RSA® Access Manager Agent when working with RSA® Adaptive Authentication.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-016: RSA, The Security Division of EMC, releases security hot fix for a potential vulnerability in RSA® Access Manager Agent when working with RSA® Adaptive Authentication Security Advisory Updated September 2, 2010 Summary: RSA Access Manage...

TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance

Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...

ESA-2010-012: EMC Disk Library (EDL) Denial Of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2010-012: EMC Disk Library EDL Denial Of Service Vulnerability CVE Identifier: CVE-2010-2633 EMC Identifier: ESA-2010-012 Severity Rating: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C Affected Software: EMC SW: EMC Disk Library EDL earlier...

EMC Disk Library DoS

No description provided...

CVE-2010-2860

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

Code injection

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

CVE-2010-2860

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

CVE-2010-2860

EMC Celerra NAS is affected by CVE-2010-2860. The NFS server exports the root ("/") and accepts internal IPs on the private network from external sources, enabling an attacker to read, create, or modify files in the user data directory via NFS requests. Exploitation in Trustwave/EMC advisories in...

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export

Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export

EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published:...

CVE-2010-2633

Unspecified vulnerability in EMC Disk Library EDL before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service communication-module crash by sending a crafted message through TCP...

Code injection

Unspecified vulnerability in EMC Disk Library EDL before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service communication-module crash by sending a crafted message through TCP...

CVE-2010-2633

CVE-2010-2633 affects EMC Disk Library (EDL) before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4. A remote, unauthenticated attacker can send a crafted TCP message to crash the communication module, causing a DoS. Remediation: upgrade to 3.2.7 or later, 3.3.2 epatch 8 or la...

CVE-2010-2633

Unspecified vulnerability in EMC Disk Library EDL before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service communication-module crash by sending a crafted message through TCP...

RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )

Product: RSA Key Manager Vendor: EMC/RSA Vulnerable Component: Key Manager Client Vulnerable Component Version: 1.5.x Vulnerability Type: SQL injection Vendor Contact Date: 4/20/2010 Status: Vendor does not want to fix the vulnerability. Vulnerability Details: RSA Key Manager Client software uses...