EMC Replication Manager Client Detection

Binary data emcrmcclientdetect.nbin...

ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability

ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-051 August 7, 2009 -- Affected Vendors: EMC -- Affected Products: EMC Replication Manager -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

EMC Replication Manager code execution

Application execution via XML-based service on TCP/6700...

EMC Replication Manager Client Control Service Remove Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the EMC Replication Manager Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within the irccd.exe process which listens by default on a TCP port around...

EMC RepliStor < 6.2 SP5/6.3 SP2 Multiple Heap Overflows

According to its version, the installation of EMC RepliStor Server on the remote host is earlier than version 6.2 SP5 or 6.3 SP2. Such versions are affected by multiple heap overflow vulnerabilities. By sending specially crafted requests to either 'ctrlservice.exe' or 'repsrv.exe', an unauthorize...

Integer overflow

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

CVE-2009-1119

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

CVE-2009-1119

EMC RepliStor is affected on versions earlier than 6.2 SP5 and 6.3 SP2. The vulnerability is described as multiple heap overflows triggered by specially crafted messages to the remote services ctrlservice.exe or rep_srv.exe, with the root cause attributed to an integer overflow. The impact cited ...

CVE-2009-1119

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to 1 ctrlservice.exe or 2 repsrv.exe, possibly related to an integer overflow...

EMC Replistor buffer overflow

Integer overflows in system services leads to buffer overflow...

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability  2009.April.08 Summary:  ======== Fortinet's FortiGuard Global Security Research Team has discovered a buffer overflow vulnerability in EMC RepliStor. Impact: ======= Remote code execution. Risk:  ===== Critical Affected Software: ...

EMC RepliStor Server Service DoASOCommand Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC RepliStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DoRcvRpcCall RPC function exposed via the repsrv.exe process which listens by defaul...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

Design/Logic Flaw

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products (NetWorker Server, Storage Node, and Client 7.3.x/7.4.x; OpenVMS 7.3.2 ECO6 and earlier; Module for Microsoft Exchange 5.1 and earlier; Module for Microsoft Applications 2.0 and earlier; Module for Meditech 2.0 and earlier; PowerSnap 2.4 SP1 and ear...

CVE-2008-6219

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Modu...

EMC AutoStart Backbone Engine远程任意指令执行漏洞

EMC AutoStart Backbone Engine是一种网络应用监视控制系统。 EMC AutoStart Backbone Engine的实现上存在严重安全漏洞，远程攻击者可能利用此漏洞在运行了AutoStart Backbone Engine的服务器上执行任意指令。 EMC AutoStart Backbone Engine无条件的信任一个来自己客户端请求中的指针，将其作为运行代码的入口，因此远程攻击者可以利用此漏洞使服务器端运行任意系统指令从而控制服务器系统。 EMC AutoStart Backbone Engine 厂商补丁： EMC ---...

CVE-2009-0311

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

Null pointer dereference

The Backbone service ftbackbone.exe in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer...

CVE-2009-0311

The CVE-2009-0311 issue affects EMC AutoStart’s Backbone Engine (ftbackbone.exe) prior to 5.3 SP2. According to the provided documents, remote attackers can cause code execution by sending a crafted value that is dereferenced as a function pointer, with exploitation described for the Backbone ser...