Skeleton Key Malware Bypasses Active Directory Authentication

Enterprise Active Directory administrators need to be on the lookout for anomalous privileged user activity after the discovery of malware capable of bypassing single-factor authentication on AD that was used as part of a larger cyberespionage campaign against a global company based in London...

How to manually remove restore points from a VMware Replica

Purpose This article documents how to remove restore points from a Veeam Backup & Replication replica in a vSphere environment. The replica must be in a state where: the latest run was successful the job is not currently running failover is not currently active. Solution Remove old restore points...

EMC Replication Manager / EMC AppSync privilege escalation

Registry path is stored without quotes...

ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability EMC Identifier: ESA-2014-179 CVE Identifier: CVE-2014-4634 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC...

EMC Replication Manager/AppSync Local Elevation of Privilege Vulnerability

EMC Replication Manager is a solution that manages replication technology and coordinates the entire data replication process through a unified management console. A local elevation of privilege vulnerability exists in EMC Replication Manager/AppSync, which can be exploited by a local attacker to...

CVE-2014-4634

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

Design/Logic Flaw

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-4634

CVE-2014-4634 describes an unquoted Windows search path vulnerability in EMC Replication Manager (pre-5.5.2) and EMC AppSync (pre-2.1.0). The underlying issue is an unquoted service path used by Windows services, enabling a local attacker to abuse a Trojan horse executable whose name starts with ...

CVE-2014-4634

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

EMC Replication Manager Command Execution - Ver2 (CVE-2011-0647)

A command execution vulnerability has been reported in Emc Replication Manager and Emc Networker Module. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Release Notes for Veeam Backup & Replication 8.0 Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 1 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817 or 8.0.0.831 prior to installing...

PT-2014-9068 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.40 and earlier Oracle MySQL Server versions 5.6.21 and earlier Description: The issue affects the availability of the system, related to Server: Replication. It is exploited via unknown vectors. Recommendation...

PT-2014-9067 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.40 and earlier Oracle MySQL Server versions 5.6.21 and earlier Description: The issue affects the availability of the system, related to Server: Replication. It is exploited via unknown vectors. Recommendation...

Using the Diskshadow Utility to Manually Test VSS Operations

Windows Server Required This article documents how to use Diskshadow , which is only available in Server versions of Windows 2008+. Purpose This article documents how to manually create a volume shadow copy using the Diskshadow command-line utility in Windows. Cause Veeam products use the Microso...

[SECURITY] Fedora 21 Update: couchdb-1.6.1-4.fc21

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

[SECURITY] Fedora 20 Update: couchdb-1.6.1-4.fc20

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

License Update Fails In Networks Where HTTP Proxy Must Be Used

Known Limitation A tenant's Veeam Backup & Replication server cannot access Veeam Cloud Connect infrastructure components through HTTP/HTTPS proxy servers. All cloud-targeted traffic from the tenant's Veeam Backup & Replication server will ignore proxy settings. Challenge License updating may fai...

Replication job task fails with "Cannot process VM, template processing is disabled"

Challenge A Replication job displays the following error message for a VM that was previously able to be replicated: Task failed. Error: Cannot process vm-: template processing is disabled Copy Cause This issue occurs when a VM that was added to a replication job is converted to a template...

Existing Hyper-V backup and replication jobs processing VM with SCSI disks start to consume x2 space on target storage after upgrade to v8

Challenge After upgrading to v8 the following issues are observed with the existing jobs processing Hyper-V VMs with SCSI disks: 1. First backup job run will transfer entire VM disks into the incremental backup storage. The following job runs will operate normally - regular incremental restore...

Critical update rollup for Veeam Backup and Replication 8.0.0.817

Challenge Critical update rollup for Veeam Backup and Replication 8.0.0.817 for Hyper-V This update rollup fixes the following Hyper-V processing issues: CBT does not track changes correctly on VHDX disks files larger than 2 TB veeam.com/KB1961 Existing Hyper-V backup and replication jobs...