ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-019: EMC Documentum Information Rights Management Multiple Vulnerabilities. EMC Identifier: ESA-2012-019 CVE Identifiers: CVE-2012-2276, CVE-2012-2277 Severity Rating: CVSS v2 Base Score: 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C Affected products: EMC...

EMC Documentum Information Rights Management Server DoS

Few different DoS conditions...

CVE-2012-2276: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via input data that 1 lacks FIPS fields or 2 has an invalid version number...

CVE-2012-2277: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service pvcontrol.exe process hang via \n line feed characters in the Id fields of many "batch begin untethered" commands...

EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)

A buffer overflow vulnerability has been reported in EMC NetWorker...

PT-2012-3916

Name of the Vulnerable Software and Affected Versions EMC Documentum Information Rights Management versions 4.x before 4.7.0100 EMC Documentum Information Rights Management versions 5.x before 5.0.1030 Description The issue allows remote attackers to cause a denial of service, specifically a...

PT-2012-3915

Name of the Vulnerable Software and Affected Versions EMC Documentum Information Rights Management versions 4.x before 4.7.0100 EMC Documentum Information Rights Management versions 5.x before 5.0.1030 Description The issue allows remote attackers to cause a denial of service, resulting in a daem...

EMC Data Protection Advisor security vulnerabilities

Integer overflow, NULL pointer dereference...

ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities EMC Identifier: ESA-2012-018, DPA-14718 CVE Identifier: CVE-2012-0406 CVE Identifier: CVE-2012-0407 Severity Rating: CVSS v2 Base Score: See below for CVSS Base Scores for individual...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

Integer overflow

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

Null pointer dereference

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0406

EMC Data Protection Advisor (DPA) 5.5–5.8 SP1 contains a NULL pointer dereference DoS in DPA_Utilities.cProcessAuthenticationData triggered by AUTHENTICATECONNECTION without a password or with an empty password. Exploitation can crash the daemon. The public disclosures (ESA-2012-018) indicate a S...

CVE-2012-0407

CVE-2012-0407 : In EMC Data Protection Advisor (DPA) 5.5–5.8 SP1, an integer overflow can occur in the DPA_Utilities library when a negative 64-bit value is used in a particular size field, leading to a denial of service (infinite loop). The issue is separate from a NULL pointer dereference (CVE-...

PT-2012-2550

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions 5.5 through 5.8 SP1 Description The issue is related to an integer overflow in the DPA Utilities library, which allows remote attackers to cause a denial of service, resulting in an infinite loop. This can ...

CVE-2012-0406: Undefined Security Weakness

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407: Undefined Security Weakness

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...