CVE-2006-2155

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

CVE-2006-2154

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...

Input validation

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

CVE-2006-2155

CVE-2006-2155 affects EMC Retrospect for Windows. Affected: EMC Retrospect 6.5 (versions up to 6.5.381), 7.0 (up to 7.0.343/344), and 7.5 (up to 7.5.1.105). The issue allows local users to execute arbitrary code by replacing the Retrospect.exe file, likely due to improper file permissions. KLA101...

CVE-2006-2155

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

CVE-2006-2154

EMC Retrospect for Windows is affected: versions 6.5 prior to 6.5.382, 7.0 prior to 7.0.344, and 7.5 prior to 7.5.1.105 do not drop privileges before opening files, allowing a local user to execute arbitrary code via the File>Open dialog. Root cause: failure to drop privileges prior to file ac...

CVE-2006-2154

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...

CVE-2006-2155: Undefined Security Weakness

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 allows local users to execute arbitrary code by replacing the Retrospect.exe file, possibly due to improper file permissions...

KLA10147 ACE vulnerabilities in EMC Retrospect

Improper privileges and permissions work was found in EMC Retrospect. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally by replacing program files or manipulating ‘open file’ dialog. Original advisories - Exploitation Related...

CVE-2006-2154: Undefined Security Weakness

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...

CVE-2006-0995

EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service client termination and loss of backup service via a malformed packet to TCP port 497, which triggers an assert error...

CVE-2006-0995

EMC Dantz Retrospect Backup Client is affected by CVE-2006-0995. The vulnerability allows an unauthenticated remote attacker to cause a denial of service by sending a malformed TCP packet to port 497, which triggers an assertion error and terminates the Retrospect client, resulting in loss of bac...

CVE-2006-0995

EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service client termination and loss of backup service via a malformed packet to TCP port 497, which triggers an assert error...

CVE-2006-0995: Undefined Security Weakness

EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service client termination and loss of backup service via a malformed packet to TCP port 497, which triggers an assert error...

Retrospect Client Detection

The remote host is running a Retrospect backup client. Retrospect is a commercial backup product from EMC / Dantz. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid20995; scriptversion"1.17";...

EMC Dantz Retrospect backup agent DoS

Invalid packet to TCP/497 port causes service to fail...

iDefense Security Advisory 03.02.06: EMC Dantz Retrospect 7 Backup client DoS Vulnerability

EMC Dantz Retrospect 7 Backup client DoS Vulnerability iDefense Security Advisory 03.02.06 http://www.idefense.com/application/poi/display?type=vulnerabilities March 02, 2006 I. BACKGROUND EMC Dantz Retrospect is a network backup client designed for small to mid-sized businesses. Dantz protects...

CVE-2005-3659

EMC Legato NetWorker (nsrd.exe) vulnerability CVE-2005-3659 allows remote denial of service through a malformed RPC request to program number 390109, triggering a NULL dereference in the nsrd service. Affected products include NetWorker 7.1.x before 7.1.4, 7.2.x before 7.2.1.Build.314, and relate...

CVE-2005-3658

EMC Legato NetWorker (and related Sun Solstice Backup and StorEdge EBS lines) is affected by CVE-2005-3658 due to multiple heap-based buffer overflows when processing malformed RPC requests. Affected versions include NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, with similar expo...

CVE-2005-3658

Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause ...