CVE-2008-0962

Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface...

iDefense Security Advisory 04.09.08: EMC DiskXtender Authentication Bypass Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...

EMC DiskXtender multiple security vulnerabilities

Authentication bypass, buffer overflow, format string vulnerability...

iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...

iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...

EMC DiskXtender默认凭据权限提升漏洞

BUGTRAQ ID: 28727 CVECAN ID: CVE-2008-0961 EMC DiskXtender是一款数据备份、迁移套件。 DiskXtender产品的主要组件包括文件系统管理器、MediaStor和证书服务器，这些组件都会创建可能远程访问的RPC端点。由于认证代码中包含有硬编码的登录和口令凭据，因此远程攻击者可以连接到这些RPC接口并使用这些凭据登录来绕过正常的认证过程，获得对DiskXtender服务器的管理访问。 EMC DiskXtender 6.20.60 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

EMC DiskXtender文件系统管理器远程栈溢出漏洞

BUGTRAQ ID: 28728 CVECAN ID: CVE-2008-0962 EMC DiskXtender是一款数据备份、迁移套件。 DiskXtender产品的文件系统管理器组件存在栈溢出漏洞。在处理UUID为b157b800-aef5-11d3-ae49-00600834c15f的RPC接口上的请求时，服务没有正确地验证请求中字符串的长度，如果用户提交了超长请求的话就可以触发这个溢出，导致以受影响服务的权限执行任意代码。但必须通过认证才能利用这个漏洞。 EMC DiskXtender 6.20.60 EMC ---...

EMC DiskXtender MediaStor组件远程格式串处理漏洞

CVECAN ID: CVE-2008-0963 EMC DiskXtender是一款数据备份、迁移套件。 DiskXtender产品的MediaStor组件在处理UUID为b157b800-aef5-11d3-ae49-00600834c15f的RPC接口上请求时，服务没有正确地验证请求中格式串的内容。由于该格式串直接传送给了格式化函数，因此远程攻击者可以执行格式串攻击，导致以受影响服务的权限执行任意指令。必须要通过认证才能利用这个漏洞。 EMC DiskXtender 6.20.60 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

rsa-xss.txt

The following security report has been sent to RSA/EMC on the 2/10/2007 and confirmed by them. RSA took action to alert their customers. ----------------------------------------- Description The WebID authentication framework suffers from a flow allowing to steal an authenticated users's session ...

Security Advisory on RSA Web ID (XSS)

The following security report has been sent to RSA/EMC on the 2/10/2007 and confirmed by them. RSA took action to alert their customers. ----------------------------------------- Description The WebID authentication framework suffers from a flow allowing to steal an authenticated users's session ...

EMC RepliStor远程堆溢出漏洞

BUGTRAQ ID: 27915 CVECAN ID: CVE-2008-6426 EMC RepliStor是实时容灾备份解决方案。 EMC RepliStor处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 EMC RepliStor中负责执行压缩的代码未经考虑目标缓冲区的大小便解压了数据，这可能触发堆溢出，导致以RepliStor Server或Control Server的权限（通常为SYSTEM）执行任意指令。攻击者无需认证便可以触发这些漏洞，但必须要能够连接到目标服务器的TCP 7144或7145端口。 EMC RepliStor 6.2 SP2 厂商补丁：...

iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities

iDefense Security Advisory 02.19.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 19, 2008 I. BACKGROUND EMC RepliStor is a data backup and recovery application for Windows. For more information, visit the vendor's website at the following URL...

EMC Replistor multiple security vulnerabilities

Multiple security vulnerabilities on TCP/7144 and TCP/7145 traffic parsing...

CVE-2007-6426

Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data...

Heap overflow

Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data...

CVE-2007-6426

Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data...

CVE-2007-6426

CVE-2007-6426 refers to multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2 (and possibly earlier versions) that could allow a remote attacker to execute arbitrary code by sending crafted compressed data. Affected software is EMC RepliStor Server; the root cause is heap-based overflows ...

Unrestricted file upload

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute...

CVE-2008-0656

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute...

CVE-2008-0656

The CVE-2008-0656 entry concerns EMC Documentum components: Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317. The vulnerability is an uncontrolled file upload in dmclTrace.jsp that allows a remote attacker to overwrite arbitrary files by supplying a crafted filename attribute. The availabl...