CVE-2020-7115

CVE-2020-7115 数秒内创建你的恶意引擎 buildengine.sh 简单的脚本，用于生成一个恶意引擎 ，使其可以直接在 openssl 参数注入场景中使用。 如何使用？ 非常简单，只需修改 engine.c 文件，填入你选择的命令： include attributeconstructor static void init execl"/bin/sh", "sh", "-c", "COMMAND"; 完成后，只需按如下方式运行脚本： bash buildengine.sh 该命令会创建一个名为 output 的文件夹，里面包含一个名为 engine.so...

CVE-2020-36164

An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file which does not exist at the following locations in both the System drive typically C:\ and the product's...

CVE-2020-36167

An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, whi...

CVE-2020-36168

An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library may attempt to load the openssl.cnf configuration file, which does not exist. By default, on Windo...

CVE-2020-36165

An issue was discovered in Veritas Desktop and Laptop Option DLO before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create...