CVE-2005-2357

EMC Navisphere Manager 6.4.1.0.0 is affected by a directory traversal vulnerability exposed via HTTP requests, enabling remote attackers to read arbitrary files using a .. in the URL. Root cause: insufficient HTTP request validation allowing traversal. In iDEFENSE advisory, CAN-2005-2357 (and CAN...

CVE-2005-2358

CVE-2005-2358 affects EMC Navisphere Manager 6.4.1.0.0, where an HTTP request for a directory ending with a "." enables a remote attacker to list arbitrary directories. The NVD entry reports a medium base score (CVSS2 5.0). iDEFENSE documents a directory-traversal vulnerability in Navisphere Mana...

CVE-2005-2357

Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-2358

EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...

CVE-2005-2358

EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...

CVE-2005-2357

Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

EMC Legato NetWorker database services use insufficient authentication

Overview The EMC Legato NetWorker database services use weak authentication, allowing a remote attacker to gain root access to the server. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun Microsystems as Solstice Backup and StorEdg...

EMC Legato NetWorker uses weak AUTH_UNIX authentication

Overview EMC Legato NetWorker uses weak AUTHUNIX authentication, allowing a remote attacker to execute arbitrary commands, gain elevated privileges, or cause a denial of service. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun...

EMC Legato NetWorker portmapper allows remote calls to "pmap_set" and "pmap_unset"

Overview The EMC Legato NetWorker PortMapper allows remote access to pmapset and pmapunset. This could allow a remote attacker to cause a denial of service or potentially to eavesdrop on communications between NetWorker programs. Description EMC Legato NetWorker is a cross-platform backup and...

EMC Navisphere Manager Directory Traversal Vulnerability

Web interface directory traversal...

[Full-disclosure] iDEFENSE Security Advisory 08.05.05: EMC Navisphere Manager Directory Traversal Vulnerability

EMC Navisphere Manager Directory Traversal Vulnerability iDEFENSE Security Advisory 08.05.05 www.idefense.com/application/poi/display?id=288&type=vulnerabilities August 05, 2005 I. BACKGROUND EMC Navisphere storage management software is a suite of tools that enables discovery, monitoring,...

EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure

EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly...

EMC Navisphere Manager 6.x - Directory Traversal / Information Disclosure

source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose the...

Low: Red Hat Bug Fix Advisory: Updated lvm package

An updated lvm package that includes a number of bug fixes and enhancements is now available for the latest Red Hat Enterprise Linux Update 3 kernel release. LVM includes all of the support for handling read/write operations on physical volumes, creating volume groups from one or more physical...

EMC AlphaStor Library Manager Detection

Binary data 4563.prm...

CVE-2002-0113

EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...

CVE-2002-0114

EMC NetWorker formerly Legato NetWorker before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform...

CVE-2002-0114

CVE-2002-0114 affects EMC NetWorker (Legato NetWorker) prior to version 7.0, where passwords are stored in plaintext in the daemon.log. This enables local users to gain privileges by reading the password from that file. The description notes the issue was originally reported for Legato NetWorker ...

CVE-2002-0113

EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...

CVE-2002-0113

CVE-2002-0113 concerns EMC NetWorker (formerly Legato NetWorker) before version 7.0. The affected component is the log storage path, where logs are written to “/nsr/logs/” with world-readable permissions, allowing local users to read potentially sensitive information and possibly gain privileges....