CVE-2006-7199

CVE-2006-7199 describes a MITM-based exposure in EMC RSA Secur ity SiteKey where a malicious, attacker-controlled proxy can relay authentication data to and from a legitimate SiteKey server, allowing an attacker to cause the correct image to be displayed remotely. The description notes the vendor...

CVE-2006-7200

EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token...

CVE-2006-7199

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle MITM attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is...

CVE-2006-7201

EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token aka the PassMark Flash shared object, which might allow remote attackers to obtain the token via HTTP...

CVE-2007-2267

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

Code injection

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

EMC NetWorker管理控制台远程绕过认证漏洞

EMC NetWorker之前被称为Legato NetWorker，是一款跨平台的备份和恢复系统。 EMC NetWorker的管理控制台在连接到NetWorker备份服务器时使用了弱加密机制。如果远程攻击者了解这种认证机制的话，就可以通过中间人攻击扮演成为NetWorker管理控制台系统，以root用户权限连接到受影响的服务器。 EMC Networker 7.3.2 临时解决方法： 阻断对2638/tcp和2638/udp端口的访问。 厂商补丁： EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-3892

The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...

CVE-2006-3892

The CVE concerns EMC NetWorker Management Console (Legato NetWorker) running version 7.3.2 before Jumbo Update 1, where weak authentication permits remote attackers to execute arbitrary commands. Affected component is the Management Console server; root-equivalent commands could be run on connect...

CVE-2006-3892

The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...

CVE-2007-1070

Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the 1 CMONNetTestConnection, 2...

CVE-2007-1070

Trend Micro ServerProtect RPC overflow CVE-2007-1070 affects ServerProtect for Windows/EMC 5.58 and Network Appliance Filer 5.61/5.62. A boundary/stack-based overflow in the RPC handling of TmRpcSrv.dll (via CMON_NetTestConnection, CMON_ActiveUpdate, CMON_ActiveRollback in StCommon.dll and ENG_Se...

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...

CVE-2006-3547

EMC VMware Player is affected by a user‑assisted denial of service vulnerability triggered by a long value assigned to ide1:0.fileName in the VM’s .vmx file. The issue leads to unrecoverable application failure when parsing the VMX, with third parties noting that write access to the .vmx file cou...

ACROS Security: Buffer Overflow In EMC (previously Dantz) Retroclient Service

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2006-05-17-1 ------------------------------------------------------------------------- ASPR 2006-05-17-1: Buffer Overflow In Retroclient Service...

EMC Retrospect backup client buffer overflow

Buffer overflow on parsing TCP/497 packet...

Buffer overflow

Buffer overflow in EMC Retrospect Client 5.1 through 7.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet to port 497...