EUVD-2008-5397

Malware in sbrugna...

Design/Logic Flaw

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

CVE-2008-5419

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

EMC Control Center SAN Manager multiple security vulnerabilities

Buffer overflow, unauthroized files access via TCP/10444...

ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability

ZDI-08-076: EMC Control Center SAN Manager SSTSENDFILE Remote File Retrieval Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-076 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remo...

EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞

BUGTRAQ ID: 32389 EMC ControlCenter SAN Manager是EMC ControlCenter产品家族中用于管理SAN的组件。 SAN Manager默认监听于TCP 10444端口的Master Agent服务（msragent.exe）在处理SSTCTGTRANS请求时将报文数据拷贝到了固定大小的栈缓冲区，远程攻击者可以通过发送恶意报文触发溢出，导致以系统用户权限执行任意指令。 EMC ControlCenter 6.0 EMC ControlCenter 5.2 SP5 EMC ---...

Solaris 8 (sparc) : 117367-02

Enterprise Storage Manager 2.1 SAN Manager management station patc. Date this patch was last updated by Sun : Oct/06/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is no longer available from Oracle. Disabled on 2015/04/20. C Tenable Network Security,...

CA Message Queuing Service Detection

The remote host is running the Computer Associate Message Queuing service CAM. This service is available with products like Unicenter TNG, Unicenter NSM, and BrightStor SAN Manager. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20147; scriptversion "1.18";...