6277 matches found
PT-2012-5514
Name of the Vulnerable Software and Affected Versions EMC Avamar Client for VMware version 6.1 Description The issue allows remote attackers to obtain sensitive information by leveraging network access to the proxy client, as the cleartext server root password is stored on the proxy client...
CVE-2012-4610: Undefined Security Weakness
EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...
EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability
ESA-2012-053.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-053: EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2012-053 CVE Identifier: CVE-2012-4610 Severity Rating: CVSS v2 Base Score: 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C Affected Products...
EMC Avamar Client for VMware weak encryption
Server access password is stored locally in cleartext...
CVE-2012-2284
The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...
CVE-2012-2290
The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...
Code injection
The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...
Code injection
The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...
CVE-2012-2284
EMC NetWorker Module for Microsoft Applications (NMM) affects versions 2.2.1, 2.3 before build 122, and 2.4 before build 375. The Information Disclosure vulnerability (CVE-2012-2284) occurs when installing/upgrading on Microsoft Exchange Server, exposing cleartext administrator credentials after ...
CVE-2012-2284
The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...
CVE-2012-2290
The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...
CVE-2012-2290
CVE-2012-2290 affects EMC NetWorker Module for Microsoft Applications (NMM) versions 2.2.1, 2.3 before build 122, and 2.4 before build 375. The issue arises from an unprotected TCP communication channel between NMM components, allowing a remote attacker to send a specially crafted message to a NM...
CVE-2012-2284: Undefined Security Weakness
The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...
PT-2012-3923
Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for Microsoft Applications NMM versions 2.2.1 through 2.3 before build 122 EMC NetWorker Module for Microsoft Applications NMM versions 2.4 before build 375 Description The issue affects the install and upgrade processes i...
PT-2012-3929
Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for Microsoft Applications NMM versions 2.2.1, 2.3 before build 122, 2.4 before build 375 Description The issue allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channe...
CVE-2012-2290: Improper Control of Generation of Code
The client in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to execute arbitrary code by sending a crafted message over a TCP communication channel...
ESA-2012-035: RSAR Adaptive Authentication (On-Premise) Information Disclosure Vulnerability
ESA-2012-035.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-035: RSA® Adaptive Authentication On-Premise Information Disclosure Vulnerability EMC Identifier: ESA-2012-035 CVE Identifier: CVE-2012-2286 Severity Rating: CVSS v2 Base Score: 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C Affected Product...
ESA-2012-025: EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities
ESA-2012-025.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-025: EMC NetWorker Module for Microsoft Applications NMM Multiple Vulnerabilities. EMC Identifier: ESA-2012-025 CVE Identifier: CVE-2012-2284,CVE-2012-2290 Severity Rating: See below for individual severity scores EMC...