EUVD-2005-2358

Malware in sbrugna...

EUVD-2005-2359

Malware in sbrugna...

EMC VPLEX GeoSynchrony Local Information Disclosure Vulnerability

EMC VPLEX is a set of next-generation data storage platforms for moving and accessing information within, across and between data centers; GeoSynchrony is a VPLEX operating system. EMC VPLEX GeoSynchrony is configured by default to store plaintext NAVISPHERE GUI passwords in log files, which can ...

CVE-2015-6847: Exposure of Sensitive Information to an Unauthorized Actor

The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive information by reading this file...

EMC Navisphere Manager 6.x Directory Traversal And Information Disclosure Vulnerabilities

No description provided by source...

CVE-2005-2357

Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-2358

CVE-2005-2358 affects EMC Navisphere Manager 6.4.1.0.0, where an HTTP request for a directory ending with a "." enables a remote attacker to list arbitrary directories. The NVD entry reports a medium base score (CVSS2 5.0). iDEFENSE documents a directory-traversal vulnerability in Navisphere Mana...

CVE-2005-2357

Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-2358

EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...

CVE-2005-2357

EMC Navisphere Manager 6.4.1.0.0 is affected by a directory traversal vulnerability exposed via HTTP requests, enabling remote attackers to read arbitrary files using a .. in the URL. Root cause: insufficient HTTP request validation allowing traversal. In iDEFENSE advisory, CAN-2005-2357 (and CAN...

CVE-2005-2358

EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...

CVE-2005-2358: Undefined Security Weakness

EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...

CVE-2005-2357: Undefined Security Weakness

Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

[Full-disclosure] iDEFENSE Security Advisory 08.05.05: EMC Navisphere Manager Directory Traversal Vulnerability

EMC Navisphere Manager Directory Traversal Vulnerability iDEFENSE Security Advisory 08.05.05 www.idefense.com/application/poi/display?id=288&type=vulnerabilities August 05, 2005 I. BACKGROUND EMC Navisphere storage management software is a suite of tools that enables discovery, monitoring,...

EMC Navisphere Manager Directory Traversal Vulnerability

Web interface directory traversal...

EMC Navisphere Manager 6.x - Directory Traversal / Information Disclosure

source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose the...

EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure

EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly...