iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage devices...

EMC DiskXtender multiple security vulnerabilities

Authentication bypass, buffer overflow, format string vulnerability...

EMC DiskXtender MediaStor组件远程格式串处理漏洞

CVECAN ID: CVE-2008-0963 EMC DiskXtender是一款数据备份、迁移套件。 DiskXtender产品的MediaStor组件在处理UUID为b157b800-aef5-11d3-ae49-00600834c15f的RPC接口上请求时，服务没有正确地验证请求中格式串的内容。由于该格式串直接传送给了格式化函数，因此远程攻击者可以执行格式串攻击，导致以受影响服务的权限执行任意指令。必须要通过认证才能利用这个漏洞。 EMC DiskXtender 6.20.60 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

GNU m4格式串及文件名引用漏洞

BUGTRAQ ID: 28688 CVECAN ID: CVE-2008-1687,CVE-2008-1688 GNU M4是广泛应用的GNU宏处理器。 GNU M4的src/freeze.c文件中的producefrozenstate函数存在格式串处理漏洞，如果向m4 -F传送了特制的文件名参数的话，就可能导致执行任意指令。 GNU M4在实现maketemp和mkstemp宏时存在漏洞，如果输出字符串中包含有特殊字符的话，就可能导致处理不正确的文件。 GNU m4 1.4.10 GNU --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-1658

Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...

DEBIAN-CVE-2008-1658

Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...

Format string

Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...

CVE-2008-1658

Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...

CVE-2008-1658

Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...

CVE-2008-1658

Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...

CVE-2008-1658

The CVE-2008-1658 entry describes a format string vulnerability in PolicyKit’s grant helper (polkit-grant-helper.c) affecting PolicyKit 0.7 and earlier. The vulnerability can cause a denial of service (crash) and may allow arbitrary code execution via crafted format strings in a password. Public ...

CVE-2008-1705

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 user name, 2 peer name, and possibly unspecified other fields...

CVE-2008-1705

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 user name, 2 peer name, and possibly unspecified other fields...

CVE-2008-1705

CVE-2008-1705 affects IBM solidDB and its logging function. The vulnerability is a format string issue in the server’s log entry creation, allowing an unauthenticated remote attacker to craft input that is interpreted as format specifiers, enabling arbitrary code execution in the context of the l...

DSA-1543-1 vlc - several vulnerabilities

Bulletin has no description...

HP OpenView NNM 7.53 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv...

HP OpenView Network Node Manager multiple security vulnerabilities

Buffer overflows, format string vulnerabilities, DoS conditions on TCP/2953, TCP/2954 traffic parsing...

hpopenview-multi.txt

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...

Multiple vulnerabilities in HP OpenView NNM 7.53

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv B multiple buffer-overflows in ovalarmsrv C Denial of Service in ovalarmsrv Exploitation:...

HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities

HP OpenView Network Node Manager OV NNM 7.53 - Multiple Vulnerabilities Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physic...