PT-2012-2549

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions 5.5 through 5.8 SP1 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by exploiting the DPA Utilities.cProcessAuthenticationData function. This can be...

VMware Service - Cross Site Scripting Vulnerability

Document Title: =============== VMware Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=420 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 420...

EMC IRM License Server 4.6.1.1995 - Denial of Service

EMC IRM License Server 4.6.1.1995 - Denial of Service Luigi Auriemma Application: EMC IRM License Server http://www.emc.com Versions: = 4.6.1.1995 Platforms: Windows Bugs: A "version compat check" FIPS NULL pointer B freezing caused by multiple commands C NULL pointer caused by commands after...

EMC IRM License Server 4.6.1.1995 - Denial of Service

Luigi Auriemma Application: EMC IRM License Server http://www.emc.com Versions: = 4.6.1.1995 Platforms: Windows Bugs: A "version compat check" FIPS NULL pointer B freezing caused by multiple commands C NULL pointer caused by commands after invalid version Exploitation: remote Date: 10 Apr 2012...

EMC NetWorker 'nsrexecd' RPC Packet Denial of Service Vulnerability

This host is running EMC NetWorker and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbemcnetworkernsrexecddosvuln.nasl 5958 2017-04-17 09:02:19Z teissa $ EMC NetWorker 'nsrexecd' RPC Packet Denial of Service Vulnerability Authors: Rachana Shetty Copyright: Copyrigh...

EMC NetWorker 'nsrexecd' RPC Packet DoS Vulnerability

EMC NetWorker is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:emc:networker";...

EMC Data Protection Advisor NULL Pointer Dereference Denial of Service Vulnerability

EMC Data Protection Advisor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EMC Data Protection Advisor 5.8.1 - Denial of Service

EMC Data Protection Advisor 5.8.1 - Denial of Service Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A...

EMC Data Protection Advisor 5.8.1 - Denial of Service

Luigi Auriemma Application: EMC Data Protection Advisor http://www.emc.com/backup-and-recovery/data-protection-advisor/data-protection-advisor.htm Versions: = 5.8.1 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bugs: A cProcessAuthenticationData NULL pointer B thread CPU 100% Exploitation: remot...

Sql injection

Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Authentication flaw

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

Hardcoded credentials

EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors...

Directory traversal

Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors...

CVE-2012-0401

Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-0399

Multiple cross-site scripting XSS vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0400

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2012-0403

Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors...

CVE-2012-0402

EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors...

CVE-2012-0399

Multiple cross-site scripting XSS vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...