2160 matches found
Dell ML6000 and Quantum Scalar i500 tape backup system command injection vulnerability
Overview Dell ML6000 and Quantum Scalar i500 tape backup system contain a command injection vulnerability. Description CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'Dell's and Quantum's advisories state the following: The tape library's remote use...
Ubuntu: Security Advisory (USN-2208-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for quantum USN-2208-2
Check for the Version of quantum OpenVAS Vulnerability Test $Id: gbubuntuUSN22082.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for quantum USN-2208-2 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...
OpenStack multiple security vulnerabilities
Glance code execution, Neutron and Swift unauthorized access, Horizon crossite scripting, Quantum / Cinder / Oslo information leakage...
Ubuntu 12.10 : quantum vulnerability (USN-2208-2)
USN-2208-1 fixed vulnerabilities in OpenStack Cinder. This update provides the corresponding updates for OpenStack Quantum. JuanFra Rodriguez Cardoso discovered that OpenStack Cinder did not enforce SSL connections when Nova was configured to use QPid and qpidprotocol is set to 'ssl'. If a remote...
[USN-2208-2] OpenStack Quantum vulnerability
========================================================================== Ubuntu Security Notice USN-2208-2 May 06, 2014 quantum vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...
USN-2208-2: OpenStack Quantum vulnerability
USN-2208-1 fixed vulnerabilities in OpenStack Cinder. This update provides the corresponding updates for OpenStack Quantum. Original advisory details: JuanFra Rodriguez Cardoso discovered that OpenStack Cinder did not enforce SSL connections when Nova was configured to use QPid and qpidprotocol i...
Unbreakable Encryption inspired by Human Biology
When we talk about security, only one thing cames to our mind – ENCRYPTION. Encryption of our online messages, encryption of our emails, encryption of our voice call, encryption of our every personal data and communication that we have to keep away from cybercriminals and, if I am not wrong, also...
A10 Networks ACOS 2.7.0-P2 (Build 53) - Buffer Overflow (PoC)
A10 Networks ACOS 2.7.0-P2 Build 53 - Buffer Overflow PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on...
A10 Networks ACOS 2.7.0-P2(build: 53) - Buffer Overflow
Exploit for hardware platform in category dos / poc === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially...
A10 Networks ACOS 2.7.0-P2 (Build 53) - Buffer Overflow (PoC)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially crafted...
Quantum DXi V1000硬编码Root账户安全漏洞
Quantum DXi V1000是一款功能完备的虚拟重复数据删除设备。 Quantum DXi V1000使用了硬编码的Root凭证，攻击者可以利用漏洞绕过某些安全限制，以root权限访问受限制的shell。 0 Quantum DXi V1000 2.3.0.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.quantum.com/default.htm...
A10 Networks ACOS 2.7.0-P2 Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially crafted...
Quantum vmPRO Web Administration Interface Detection
Binary data quantumvmprodetect.nbin...
Quantum vmPRO Default Credentials Check
Nessus was able to login to the remote web administration interface of the Quantum vmPRO appliance using a known set of default credentials. A remote attacker using these credentials would have complete control of the appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Quantum DXi V1000 SSH Private Key Exposure
Quantum ships a public/private key pair on DXi V1000 2.2.1 appliances that allows passwordless authentication to any other DXi box. Since the key is easily retrievable, an attacker can use it to gain unauthorized remote access as root...
Quantum vmPRO后门未授权访问漏洞
Bugtraq ID:66274 Quantum vmPRO是一款适用于保护虚拟机数据的解决方案。 Quantum vmPRO "/usr/local/pancetera/bin/cmdprocessor.py"存在一个隐藏命令可获得root shell，允许通过验证的远程攻击者利用漏洞提交恶意命令获得root shell。 0 Quantum vmPRO 3.1.2 Quantum vmPRO 2.3.0.1已经修复该漏洞，建议用户下载更新： http://quantum.com/...
Quantum DXi V1000静态密钥安全漏洞
Bugtraq ID:66267 Quantum DXi V1000是一款功能完备的虚拟重复数据删除设备。 Quantum DXi V1000存在一个root账户的静态SSH私钥，允许攻击者利用该密钥未授权以root权限访问设备。 该设备的root用户还包含内置密码。 0 Quantum DXi V1000 2.2.1 Quantum DXi V1000 2.3.0.1已经修复该漏洞，建议用户下载更新： http://quantum.com/...
Quantum DXi V1000 SSH Private Key Exposure
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class Metasploit3 'Quantum DXi V1000 SSH Private Key Exposure', 'Description' = %q Quantum ships a public/private key pair on DXi V100...
Quantum DXi V1000 2.2.1 - Static SSH Key
Quantum DXi® V-Series is a virtual deduplication backup appliance that protects physical and virtual data across remote sites, the datacenter and cloud deployments. Details: ---------- 0x01 - Default root user The root user has a hardcoded password that is unknown and not changeable. Normally...