CVE-2010-0620

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

EMC HomeBase Server directory traversal

Directory traversal via SSL services...

CVE-2010-0620

Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. dot dot in an unspecified parameter...

CVE-2010-0620

EMC HomeBase Server suffers a directory traversal and remote code execution vulnerability in the SSL Service (CVE-2010-0620). Affects EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2. The flaw allows an unauthenticated, remote attacker to overwrite arbitrary files and execute code vi...

ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-020 February 23, 2010 -- CVE ID: CVE-2010-0620 -- Affected Vendors: EMC -- Affected Products: EMC HomeBase Server -- Vulnerability Details: This...

ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability

ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability Identifier: ESA-2010-003 Identifier: HB6042 CVE Identifier: CVE-2010-0620 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC HomeBase Server version 6.2.x EMC HomeBase Server version 6.3....

EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to upload arbitrary files on vulnerable installations of EMC HomeBase Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HomeBase SSL Service due to a failure to sanitize '../' directory traversal...

EMC Captiva PixTools Distributed Imaging ActiveX crafted web page

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. This software application can be integrated into existing applications serving as either a centralized or distributed document capture module. EMC Captiva PixTools...

EMC RepliStor rep_srv and ctrlservice Denial of Service (CVE-2009-3744)

EMC RepliStor is a data recovery and protection system exclusively for Microsoft Windows. Recovery and protection are achieved by providing easy to use data replication to multiple sources in real-time or on a schedule. Files, directories, volumes and shares can be replicated as long as TCP/IP...

Update Protection against EMC RepliStor rep_srv and ctrlservice Denial of Service

A denial of service vulnerability exists in EMC RepliStor. EMC RepliStor is a data recovery and protection system designed for Microsoft Windows. The vulnerability is due to an input validation error while parsing a specially crafted packet sent to 'repsrv.exe' and 'ctrlservice.exe' services...

EMC Captiva PixTools Distributed Imaging ActiveX Control File Creation

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. A vulnerability has been reported in EMC Captiva PixTools. The flaw is due to unrestricted access to the "SetLogFileName" and "WriteToLog" methods, which attackers c...

EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'EMC...

EMC AlphaStor Agent Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'EMC AlphaStor Age...

EMC Legato NetWorker Remote Execution Service Buffer Overflow (CVE-2007-3618)

EMC Legato NetWorker is an enterprise level backup and recovery suite product. It provides backup functionality for Windows, Linux, Unix, Netware, and VMS environments. EMC Legato NetWorker is designed with a Server-Agent principle. The communication between nodes is facilitated via a series of...

Hummingbird STR Service Buffer Overflow

Hummingbird STR service STRsvc.exe is installed on the remote host. It is included with EMC Documentum eRoom, OpenText Hummingbird, and OpenText Search Server. The installed version is affected by a buffer overflow vulnerability. By sending a very large packet to the Hummingbird STR service, it m...

多个厂商Hummingbird STR服务栈溢出漏洞

BUGTRAQ ID: 36868 EMC Documentum eRoom是基于WEB的协作服务器，OpenText Search Server是高效的纯文本搜索引擎，上述产品都使用了Hummingbird STR服务。 默认监听于TCP 10500端口上的Hummingbird STR服务（STRsvc.exe）中存在栈溢出漏洞。STRlib.dll模块将接收到的网络报文拷贝到了静态的栈缓冲区，如果发送了超长的报文就可以触发栈溢出，导致以SYSTEM权限执行任意指令。 EMC Documentum eRoom 7.4.1 Open Text Corporation Search...

Hummingbird STR service / EMC Documentum eRoom / OpenText Search Server buffer overflow

Buffer overflow on TCP/10500 traffic parsing...

Multiple Vendor Hummingbird STR Service Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC Documentum eRoom, OpenText Hummingbird and OpenText Search Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hummingbird STR...

EMC Retrospect Client Crafted Packet Buffer Overflow (CVE-2006-2391)

The EMC Retrospect suite is a system designed to automate backup operations in an enterprise environment. The system is comprised of a server and multiple clients, also known as agents. The server initiates operations on the client, including backup of the files, clock synchronization, and variou...

EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)

The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...