Update Rollup 3 for System Center 2012 R2 Data Protection Manager

Update Rollup 3 for System Center 2012 R2 Data Protection Manager Introduction This article describes new features and issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Data Protection Manager DPM. Additionally, this article contains the installation instructions for...

Veeam Backup & Replication 10 Cumulative Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running version 10 build 10.0.0.4461 prior to installing this update. You can check this under Help | About in the Veeam Backu...

gulp-tape injection vulnerability

gulp-tape is a package that supports running Tape tests in Gulp. An injection vulnerability exists in gulp-tape 1.0.0 and earlier versions, which can be exploited by an attacker to execute arbitrary commands...

Remote Code Execution (RCE)

gulp-tape is susceptible to remote code execution RCE. The vulnerability exists as the flush function accepts the tapeProcess argument directly from the input using tapeBinaryFilepath without any sanitization...

CVE-2020-7605

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...

CVE-2020-7605

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...

CVE-2020-7605

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...

Design/Logic Flaw

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...

CVE-2020-7605

CVE-2020-7605 corresponds to a command-injection flaw in gulp-tape up to version 1.0.0. The vulnerability arises from injecting arbitrary commands via gulp-tape options, enabling potential remote code execution if an attacker can influence those options. Multiple connected sources (Red Hat CVE en...

CVE-2020-7605

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options...

Command Injection

Overview gulp-tape is a to run Tape tests in Gulp. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands as part of gulp-tape options. PoC var root = require"gulp-tape"; var gulp = require"gulp"; var options = name: "& touch JHU.txt"...

A Tiny Piece of Tape Tricked Teslas Into Speeding Up 50 MPH

An MGM Resorts breach, natural gas ransomware, and more of the week's top security news...

File to tape job significantly slows down due to garbage collection operations

Challenge A file to tape job significantly slows down after some time of processing. The source disks and the Veeam database are under a low load, CPU is not overloaded either. Available RAM on the Veeam server is around 10% or lower. Cause When available RAM on the Veeam server reaches a certain...

Backup to Tape Job to the HPE LTO tape drives fails with "Tape error: '1117'" after upgrade to Veeam Backup & Replication 9.5 Update 4b

Challenge Backup and other operations to HPE LTO tape drives may constantly fail after installation of Veeam Backup & Replication 9.5 Update 4b 9.5.4.2866. Veeam fails to connect to the tape drive and returns the following errors: 18.07.2019 15:49:24 Warning TapeDrive alert: The tape drive has a...

VIDEO: Utilizing Tape Storage as a Malware Failsafe

Tape storage is commonly accepted as a cost-effective backup target, and it also can play an even more strategic role in combatting cybercrime. In a recent video with Storage Switzerland, Lead Analyst George Crump and David Balcar, security strategist for Carbon Black, discussed how to use tape...

Hardware encryption doesn't work on tape operations after update to 9.5 Patch 4b

Challenge After you update to patch 4b 9.5.4.2866, you may face the following encryption-related issues during the backup and restore procedures. Restore from tape backups made in the previous product versions with enabled hardware encryption may fail with the following error message: 11.07.2019...

Release Notes for Veeam Backup & Replication 9.5 Update 4b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 4b Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prior to...

Tape job does not copy source backup files and finishes with "No backup files found"/"No new files found" message

Challenge A tape job finishes with the Success status, but the backup files of a source jobs are not copied. In the tape job statistics, you can find the "No backup files found"/"No new files found" message. Cause Case 1: • The source job is a backup copy job. • At the Choose Media Pool for Full...

Arbitrary File Read

sudo is vulnerable to arbitrary file read attacks. The vulnerability exists as sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access but not view file contents by running a program...

MGASA-2019-0021 Updated openafs packages fix security vulnerabilities

Jeffrey Altman reported that the backup tape controller butc process does accept incoming RPCs but does not require or allow for authentication of those RPCs, allowing an unauthenticated attacker to perform volume operations with administrator credentials CVE-2018-16947. Mark Vitale reported that...