ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability

ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-034 June 4, 2008 -- CVE ID: CVE-2008-1661 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard StorageWorks -- TippingPoint...

Stack overflow

Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring SWSM before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request...

CVE-2008-1661

Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring SWSM before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request...

Hewlett-Packard StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard StorageWorks Storage Mirroring. Authentication is not required to exploit this vulnerability. The specific flaw exists in the DoubleTake.exe process bound by default on TCP ports...

Unfixed XSS vulnerability at kone-liga.ru

Security researcher PaPPy, has submitted on 15/05/2008 a cross-site-scripting XSS vulnerability affecting kone-liga.ru, which at the time of submission ranked 10187321 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently...

[SECURITY] Fedora 7 Update: rsync-2.6.9-6.fc7

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

[SECURITY] Fedora 8 Update: rsync-2.6.9-5.fc8

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

Buffer overflow

Buffer overflow in Double-Take aka HP StorageWorks Storage Mirroring 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field...

Double free

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon crash via a certain long packet that triggers an attempt to allocate a large amount of memory...

CVE-2008-0978

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type 1 0x2728, which provides operating system and path information; 2 0x274e, which lists Ethernet adapters; 3...

Double free

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon termination via 1 a large vector value, which raises a "vector too long" exception; or 2 a certain packet that raises an...

CVE-2008-0978

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type 1 0x2728, which provides operating system and path information; 2 0x274e, which lists Ethernet adapters; 3...

CVE-2008-0974

CVE-2008-0974 affects Double-Take 5.0.0.2865 and earlier (also distributed under HP StorageWorks Storage Mirroring). The vulnerability allows remote attackers to cause a denial of service (daemon termination) via either: (1) a large vector value triggering a “vector too long” exception, or (2) a ...

CVE-2008-0977

CVE-2008-0977 affects Double-Take 5.0.0.2865 and earlier (HP StorageWorks Storage Mirroring family). A long network packet can trigger an allocation of a large amount of memory, allowing remote attackers to cause a denial of service by crashing the daemon. No remediation or exploitation details a...

CVE-2008-0976

CVE-2008-0976 affects Double-Take 5.0.0.2865 and earlier (distributed under HP StorageWorks Storage Mirroring and other names). The underlying issue is a NULL pointer dereference in a network daemon exploitable by malformed packets, with demonstrated packet types 0x2722 and 0x272a, leading to rem...

CVE-2008-0979

CVE-2008-0979 concerns a stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier (also under HP StorageWorks Storage Mirroring and other names). The issue allows a remote attacker to cause a denial of service (daemon crash) by sending a certain packet that triggers recursive calling...

CVE-2008-0975

CVE-2008-0975 affects Double-Take (HP StorageWorks Storage Mirroring lineage) up to version 5.0.0.2865, where a remote attacker can cause CPU exhaustion by sending a -1 value in the vector size field. Core details indicate the issue is a remote DoS via malformed vector size; no remediation or exp...

CVE-2008-0973

The CVE-2008-0973 entry describes a buffer overflow in Double-Take (HP StorageWorks Storage Mirroring) version 4.5.0.1629 and other 4.5.0.x releases. The vulnerability is exploitable by remote attackers via a packet containing a long string in the username field. The impact is listed as unknown/u...

Double-Take / HP StorageWorks Storage Mirroring disaster recovery software multiple security vulnerabilities

Multiple DoS conditions and information leakage...

HP OpenView Storage Mirroring Server Detection

The remote host is running HP OpenView Storage Mirroring Daemon. This service is part of the HP OpenView Management suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid23698; scriptversion"$Revision: 1.9 $"; scriptcvsdate"$Date: 2014/08/29 21:03:42 $";...