6277 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-5517
Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance versions 2.7.x through 3.x before 3.2.1 Description The issue allows local users to bypass intended access restrictions via a brute-force attack because the software does not properly restrict the numb...
CVE-2012-4612
Cross-site scripting XSS vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4613
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...
CVE-2012-4612
CVE-2012-4612 is an XSS vulnerability in RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x prior to 3.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the primary sources, affected products include RSA DPM Ap...
CVE-2012-4613
The CVE-2012-4613 entry concerns EMC RSA Data Protection Manager Appliance 2.7.x and 3.x prior to 3.2.1. The vulnerability is an improper restriction of authentication attempts, enabling local brute-force-style bypass of authentication. Affected component is the authentication mechanism; root cau...
EMC NetWorker Installed
EMC NetWorker formerly Legato NetWorker, a suite of enterprise level data protection software, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62945; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...
PT-2012-5516
Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance and Software Server versions 2.7.x through 3.2.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For...
CVE-2012-4612: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4613: Improper Authentication
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...
EMC NetWorker Module for Microsoft Applications 2.2.1 / 2.3.x < 2.3 build 122 / 2.4.x < 2.4 build 375 Multiple Vulnerabilities
The version of EMC NetWorker formerly Legato NetWorker Module for Microsoft Applications installed on the remote host is 2.2.1, 2.3 prior to 2.3 build 122, or 2.4 prior to 2.4 build 375. As such, it reportedly is affected by multiple vulnerabilities, including arbitrary code execution and an...
EMC RSA Data Protection Manager security vulnerabilities
Crossite scripting, restrictions bypass...
EMC NetWorker - Format String (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'EMC Networker Format String',...
EMC Networker Format String
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'EMC Networker Format String',...
EMC Networker Format String Vulnerability
This Metasploit module exploits a format string vulnerability in the lgsprintf function as implemented in liblocal.dll on EMC Networker products. This Metasploit module exploits the vulnerability by using a specially crafted RPC call to the program number 0x5F3DD, version 0x02, and procedure 0x06...
VMware的EMC Avamar Client "root"密码泄露安全漏洞
CVE ID: CVE-2012-4610 EMC Avamar是数据去重备份和恢复的解决方案。 EMC Avamar Client for VMware v6.1将根密码以明文形式保存代理客户端，具有代理客户端和Avamar服务器访问权限的恶意用户可利用此漏洞获取访问Avamar服务器的提升权限。 0 EMC Avamar 6.x 厂商补丁： EMC --- EMC已经为此发布了一个安全公告（40843）以及相应补丁，建议您尽快应用更新并更改现有的Avamar Server根用户密码: 40843：EMC Avamar Client for VMware 6.1.100-402...
CVE-2012-4610
EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...
Default credentials
EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...
CVE-2012-4610
EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...
CVE-2012-4610
EMC Avamar Client for VMware 6.1 stores the Avamar server root password in clear text on the proxy client. A user with network access to the proxy and Avamar server could obtain privileged access to the server. EMC issued a security advisory (40843) and hotfixes (e.g., 6.1.100-402) to address thi...