CVE-2006-7201

EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token aka the PassMark Flash shared object, which might allow remote attackers to obtain the token via HTTP...

CVE-2006-7200

EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token...

CVE-2006-7199

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle MITM attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is...

CVE-2006-7201

CVE-2006-7201 affects EMC RSA Security SiteKey where the secure qualifier is not set on the SiteKey Flash token (PassMark Flash). This misconfiguration could allow remote attackers to obtain the token over HTTP, enabling exposure of authentication-related data. The Connected documents describe th...

CVE-2006-7200

CVE-2006-7200 concerns EMC RSA Security SiteKey. The issue describes challenge-bypass tokens that persist indefinitely due to the lack of a user-facing cancellation interface, enabling attackers to bypass one authentication stage by stealing and replaying a token. The connected sources consistent...

CVE-2006-7199

CVE-2006-7199 describes a MITM-based exposure in EMC RSA Secur ity SiteKey where a malicious, attacker-controlled proxy can relay authentication data to and from a legitimate SiteKey server, allowing an attacker to cause the correct image to be displayed remotely. The description notes the vendor...

CVE-2006-7200

EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token...

CVE-2006-7201

EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token aka the PassMark Flash shared object, which might allow remote attackers to obtain the token via HTTP...

CVE-2006-7199

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle MITM attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is...

CVE-2006-7199: Undefined Security Weakness

EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle MITM attack in which an attacker-controlled server proxies authentication data to and from a legitimate SiteKey server. NOTE: the vendor disputes the severity of the issue, stating that it is...

CVE-2006-7201: Undefined Security Weakness

EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token aka the PassMark Flash shared object, which might allow remote attackers to obtain the token via HTTP...

CVE-2006-7200: Undefined Security Weakness

EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token...

Code injection

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267: Undefined Security Weakness

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

EMC NetWorker管理控制台远程绕过认证漏洞

EMC NetWorker之前被称为Legato NetWorker，是一款跨平台的备份和恢复系统。 EMC NetWorker的管理控制台在连接到NetWorker备份服务器时使用了弱加密机制。如果远程攻击者了解这种认证机制的话，就可以通过中间人攻击扮演成为NetWorker管理控制台系统，以root用户权限连接到受影响的服务器。 EMC Networker 7.3.2 临时解决方法： 阻断对2638/tcp和2638/udp端口的访问。 厂商补丁： EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-3892

The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...

CVE-2006-3892

The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...

CVE-2006-3892

The CVE concerns EMC NetWorker Management Console (Legato NetWorker) running version 7.3.2 before Jumbo Update 1, where weak authentication permits remote attackers to execute arbitrary commands. Affected component is the Management Console server; root-equivalent commands could be run on connect...