ESA-2013-050: EMC Replication Manager Sensitive Information Disclosure Vulnerability

ESA-2013-050.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-050: EMC Replication Manager Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2013-050 CVE Identifier: CVE-2013-3272 Severity Rating: CVSS v2 Base Score: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected products: EMC...

0x80042317 or Error: VSSControl: -2147212521

Challenge A task fails with the following error: Failed to prepare guest for hot backup. Error: VSSControl: -2147212521 Backup job failed. Discovery phase failed. Cannot add volumes to the snapshot set. Cannot add a volume to the snapshot set. Volume name:...

CVE-2013-3272

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

Design/Logic Flaw

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

CVE-2013-3272

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

CVE-2013-3272

EMC Replication Manager (RM) prior to version 5.4.4 logs encoded passwords in application log files, enabling local users to read sensitive credentials. Affected product: EMC Replication Manager (RM) before 5.4.4. Remediation: upgrade to RM 5.4.4; delete relevant server log files and reset expose...

PT-2013-4268

Name of the Vulnerable Software and Affected Versions EMC Replication Manager RM versions prior to 5.4.4 Description The issue allows local users to obtain sensitive information by reading application log files and conducting an unspecified decoding attack, as encoded passwords are stored in thes...

CVE-2013-3272: Undefined Security Weakness

EMC Replication Manager RM before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack...

How to Collect Guest Processing Log Files

Purpose This article documents how to locate and gather guest-level log files associated with Application-Aware Processing or VM Guest OS File Indexing that occurs with Veeam Backup & Replication VM backup jobs. While investigating issues related to Guest Processing, additional logs must be...

Credentials Test or Job Fails when attempt to use VIX

Challenge When using Veeam Backup & Replication with a VMware environment the following error may be seen when using the Guest Credentials Test or when processing a VM that is in a DMZ or Isolated environment. Failed to prepare guest for hot backup. Error: Failed to connect to guest agent. Errors...

Motion 3.2.12 XSS / CSRF / Buffer Overflow / SQL Injection

Title: Motion 3.2.12 Multiple Vulnerabilities Author: xistence - xistenceat0x90.nl Date: 26/06/2013 Vendor page: http://www.lavrsen.dk/foswiki/bin/view/Motion Software link: http://www.lavrsen.dk/foswiki/bin/view/Motion/DownloadFiles Software description: Motion is a program that monitors the vid...

Choosing a restore proxy for performing a Full VM restore

When doing a Full VM restore with Veeam Backup & Replication, sometimes you will need to choose a proxy to get the restore done faster. An example would be restoring across a WAN where Veeam is local, but the repository is on the remote site...

Unable to Add Machine With RAS (Remote Access Service) Enabled

Challenge When trying to add a Windows Server that has the Remote Acces role enabled to Veeam Backup & Replication as a Managed Server, the operation fails with: Failed to check whether remote installer service is available. The RPC server is unavailable. RPC function call failed. Function name:...

How to Manually Repair a VMware Replica created by Veeam

The actions documented in this article should never be performed on a production virtual machine VM , as they intentionally lead to the VM losing data. That data loss is only acceptable with a Veeam replica, because the replica will be repaired and brought back up-to-date when the next replicatio...

Error "A hard drive is missing" when performing file restore of VM

Challenge The version of Veeam Backup & Replication you are on likely does not support the Windows drive type. Cause In older versions of Veeam Backup & Replication, we were unable to perform File Level Recoveries on drives with the GPT type or marked as Dynamic with a spanned volumes. If you are...

Attempt to launch Veeam Backup and Replication fails

Challenge An attempt to launch Veeam Backup & Replication fails with the message that Veeam Backup and Replication service is not running: The service can actually be seen as running: The following entries can be seen in VeeamShell.log: Timestamp Info ------- Started new session of Veeam Shell...

Error “Please install Microsoft Visual C++ 2010 SP1 Redistributable Package and try again.” when attempting to install Veeam Backup & Replication Cloud Edition

Error “Please install Microsoft Visual C++ 2010 SP1 Redistributable Package and try again.” when attempting to install Veeam Backup & Replication Cloud Edition...

CVE-2013-0584

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors...

Design/Logic Flaw

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors...

CVE-2013-0584

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors...