564 matches found
Excluded VM Disk is Still Snapshotted
Article Applicability This article is Veeam Backup & Replication version agnostic as it relates to the behavior of snapshots and checkpoints within the hypervisor environment. Challenge Disks of a VM being backed up by Veeam Backup & Replication are snapshotted even though they were excluded from...
Design/Logic Flaw
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to 1 delete or 2 upload snapshots...
CVE-2012-4066
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to 1 delete or 2 upload snapshots...
CVE-2012-4066: Improper Authentication
The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to 1 delete or 2 upload snapshots...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...
PT-2012-2203
Name of the Vulnerable Software and Affected Versions Sentinel plugin version 1.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots. Recommendations For Sentinel plugin version 1.0.0,...
WordPress Sentinel Plugin <= 1.0.0 - CSRF
Because of this vulnerability in wordpresssentinel.php, the attackers can hijack the authentication of an administrator for requests that trigger snapshots. Solution Update the plugin...
Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities
Title: ====== Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities Date: ===== 2012-10-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=571 VL-ID: ===== 571 Common Vulnerability Scoring System: ==================================== 5 Introduction: =============...
Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities
Document Title: =============== Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=571 Release Date: ============= 2012-09-30 Vulnerability Laboratory ID VL-ID: ====================================...
SA-CONTRIB-2012-059 - Autosave - Cross Site Request Forgery
CVE: CVE-2012-2097 This module enables snapshots of your node edit form to be saved in the background while you are editing to help prevent the data from being lost. The module doesn't sufficiently protect against a user being tricked into submitting saved results to a node. Versions affected...
PT-2011-36: Insufficient authorization in Citrix XenServer Virtual Switch Controller
Positive Research Center has discovered an insufficient authorization in Citrix XenServer Virtual Switch Controller. Low privileged Read-Only users can change certain configuration parameters e.g. hostname and domain. Configuration snapshots that contain the entire system configuration including...
Creating snapshots in a different location than default virtual machine directory
How to change the default virtual machine working directory location for snapshots...
Top secret: three steps to teach you easily steal a VMware virtual machine and its data-vulnerability warning-the black bar safety net
Whether to remember a virtualized e-mail server or the payment system? If you have access to the virtualization environment administrator privileges, you can easily get into the virtualization environment, and steal all the data without leaving any traces. From the Data Center to steal a physical...
Mandriva Update for lvm2 MDVA-2010:105 (lvm2)
Check for the Version of lvm2 OpenVAS Vulnerability Test Mandriva Update for lvm2 MDVA-2010:105 lvm2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Mandriva Update for lvm2 MDVA-2010:105 (lvm2)
Check for the Version of lvm2 OpenVAS Vulnerability Test Mandriva Update for lvm2 MDVA-2010:105 lvm2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
DEBIAN-CVE-2009-3611
common/snapshots.py in Back In Time aka backintime 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared...
[SECURITY] Fedora 10 Update: backintime-0.9.26-3.fc10
Back In Time is a simple backup system for Linux inspired from =E2=80=9Cflyback project=E2=80=9D and =E2=80=9CTimeVault=E2=80=9D. The back up is done by taking snapshots of a specified set of directories...
SerWeb Remote File Inclusion
SerWeb = 2.1.0-dev1 2009-07-02 Multiple Remote File Inclusion Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/ POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell Us = phpflag magicquotesgpc Off / phpflag...
CVE-2008-3703
The management console in the Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation for Windows SFW 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that...
CVE-2008-3703: Improper Authentication
The management console in the Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation for Windows SFW 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that...