Immunity Canvas: EMC_NETWORKERFS

Name| emcnetworkerFS ---|--- CVE| CVE-2012-2288 Exploit Pack| CANVAS Description| EMC Networker format string exploitation Notes| CVE Name: CVE-2012-2288 VENDOR: Notes: http://blog.exodusintel.com/2012/08/29/when-wrapping-it-up-goes-wrong/ Tested on Windows Server 2003 Standard Edition...

CVE-2012-2288

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message...

CVE-2012-2288

EMC NetWorker nsrd RPC service is affected by a remote format-string vulnerability (CVE-2012-2288) in NetWorker 7.6.3–8.0, allowing arbitrary code execution via crafted messages. Public sources indicate the issue stems from the nsrd format string handling (format string vulnerability in the lg_sp...

PT-2012-3927

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 7.6.3 through 7.6.4 EMC NetWorker versions 8.0 through 8.0.0.0 Description The issue allows remote attackers to execute arbitrary code via format string specifiers in a message. This is due to a format string vulnerabili...

CVE-2012-2288: Use of Externally-Controlled Format String

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message...

ZDI-12-182 : EMC AppXtender WxSuperCtrl650.ocx ActiveX Control Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-182 : EMC AppXtender WxSuperCtrl650.ocx ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-182 August 29, 2012 - -- CVE ID: CVE-2012-2289 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affect...

ZDI-12-179 : EMC ApplicationXtender Desktop Viewer AEXView ActiveX AnnoSave Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-179 : EMC ApplicationXtender Desktop Viewer AEXView ActiveX AnnoSave Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-179 August 29, 2012 - -- CVE ID: CVE-2012-2289 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:...

EMC ApplicationXtender unauthorized access

It's possible to upload files to affected system...

ESA-2012-038: EMC NetWorker Format String Vulnerability

ESA-2012-038.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-038: EMC NetWorker Format String Vulnerability EMC Identifier: ESA-2012-038 CVE Identifier: CVE-2012-2288 Severity Rating: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC NetWorker 7.6.3 EMC NetWorker 7.6.4 EMC NetWorke...

EMC Networker formatstring vulnerability

Format string vulnerability on RPC request parsing...

CVE-2012-2285

EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...

Authentication flaw

EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...

CVE-2012-2285

EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...

CVE-2012-2285

CVE-2012-2285 affects EMC Cloud Tiering Appliance (CTA) and CTA/VE versions up to 9.0 that allow remote attackers to obtain GUI administrative access by sending a crafted file during authentication. The root cause is an authentication bypass that can grant full GUI admin privileges, as detailed i...

EMC Networker Format String

This module exploits a format string vulnerability in the lgsprintf function as implemented in liblocal.dll on EMC Networker products. This module exploits the vulnerability by using a specially crafted RPC call to the program number 0x5F3DD, version 0x02, and procedure 0x06. This module has been...

EMC ApplicationXtender Desktop Viewer AEXView ActiveX AnnoSave Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC ApplicationXtender. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2012-2285: Improper Authentication

EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...

ESA-2012-034: EMC Cloud Tiering Appliance (CTA) Authentication Bypass Vulnerability

ESA-2012-034.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-034: EMC Cloud Tiering Appliance CTA Authentication Bypass Vulnerability EMC Identifier: ESA-2012-034 CVE Identifier: CVE-2012-2285 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC...

EMC Cloud Tiering Appliance authentication bypass

Authentication bypass is possible...

EMC AppXtender WxSuperCtrl650.ocx ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC ApplicationXtender. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...