Sql injection

SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...

CVE-2010-1904

RSA Key Manager (RKM) C Client 1.5.x is vulnerable to SQL injection via the metadata in encrypted data, allowing an attacker to manipulate the KeyTable/config caching data and potentially modify or delete encryption keys. The vulnerability arises from improper validation of metadata during key lo...

CVE-2010-1904

SQL injection vulnerability in EMC RSA Key Manager RKM C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data...

RSA Key Manager 1.5.x SQL Injection

CVE: CVE-2010-1904 Product: RSA Key Manager Vendor: EMC/RSA Vulnerable Component: Key Manager Client Vulnerable Component Version: 1.5.x Vulnerability Type: SQL injection Vendor Contact Date: 4/20/2010 Status: Vendor does not want to fix the vulnerability. Vulnerability Details: RSA Key Manager...

RSA Key Manager version 1.5.x SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= RSA Key Manager version 1.5.x SQL Injection Vulnerability ========================================================= CVE: CVE-2010-1904 Product: RSA Key Manager Vendor: EMC/RSA Vulnerabl...

ESA-2010-007: EMC Avamar Denial Of Service Vulnerability

ESA-2010-007: EMC Avamar Denial Of Service Vulnerability Identifier: ESA-2010-007 CVE Identifier: CVE-2010-1919 Severity Rating: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C Affected products: EMC Avamar version 4.1.x EMC Avamar version 5.0 Please note EMC Avamar 5.0 SP1 is not affected by...

EMC Avamar DoS

Crash on network messages parsing...

CVE-2010-1919

Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service gsan service hang by sending a crafted message using TCP...

Code injection

Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service gsan service hang by sending a crafted message using TCP...

CVE-2010-1919

Summary (CVE-2010-1919) : A DoS vulnerability in EMC Avamar 4.1.x and 5.0 prior to SP1 allows an unauthenticated remote attacker to hang the gsan service by sending a crafted TCP message, potentially requiring a reboot of the affected grid. Affected versions: EMC Avamar 4.1.x and 5.0 (pre-SP1). M...

CVE-2010-1919

Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service gsan service hang by sending a crafted message using TCP...

Multiple Vendors RPC librpc.dll Stack Buffer Overflow (CVE-2009-2754)

Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. The librpc.dll handles the RPC protocol parsing. A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. The...

EMC AlphaStor Agent - Remote Buffer Overflow (Metasploit)

$Id: alphastoragent.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Preemptive Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. Informix is a family of relational database management system RDBMS products by IBM. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol...

EMC RepliStor rep_srv.exe Crafted TCP Packet Remote DoS (ESA-09-019)

According to its version, the EMC RepliStor Server service running on the remote host reportedly may crash while attempting to process a specially crafted network packet. An unauthenticated, remote attacker can leverage this issue to deny service to legitimate users. C Tenable Network Security,...

CVE-2009-2754

CVE-2009-2754 relates to a stack-based buffer overflow in librpc.dll’s authentication for the Portmapper service (portmap.exe) used by IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.TC9 and 11.x prior to 11.10.TC3, and EMC Legato NetWorker. The issue is triggered by a crafted parameter siz...

ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-023 March 1, 2010 -- CVE ID: CVE-2009-2754 -- Affected Vendors: IBM EMC -- Affected Products: IBM Informix EMC NetWorker -- TippingPointTM IPS Customer...

Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server and EMC Legato Networker. User interaction is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll,...

DSquare Exploit Pack: D2SEC_HOMEBASE

Name| d2sechomebase ---|--- CVE| CVE-2010-0620 Exploit Pack| D2ExploitPack Description| EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability Notes|...

Directory traversal

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...