52 matches found
EMC VNX / Celerra privilege escalation
Weak permissions for script files...
ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability
ESA-2013-041.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability EMC Identifier: ESA-2013-041 CVE Identifier: CVE-2013-3270 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: •...
CVE-2013-3270
EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...
Design/Logic Flaw
EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...
CVE-2013-3270
EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership...
CVE-2013-3270
CVE-2013-3270 affects EMC VNX Control Station (versions prior to 7.1.70.2) and EMC Celerra Control Station (prior to 6.0.70.1). The root cause is incorrect group ownership for unspecified script files, allowing local users to escalate privileges by leveraging the nasadmin group membership. The vu...
CVE-2012-2282
EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 aka MR1 SP3.2 and 2.2 before 2.2.0.19078 aka MR2 SP0.2 do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a 1 NFSv2, 2...
Cross site request forgery (csrf)
EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 aka MR1 SP3.2 and 2.2 before 2.2.0.19078 aka MR2 SP0.2 do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a 1 NFSv2, 2...
CVE-2012-2282
EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 aka MR1 SP3.2 and 2.2 before 2.2.0.19078 aka MR2 SP0.2 do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a 1 NFSv2, 2...
CVE-2012-2282
Summary of CVE-2012-2282 : EMC Celerra Network Server 6.x (before 6.0.61.0), VNX 7.x (before 7.0.53.2), and VNXe 2.0/2.1 prior to 2.1.3.19077 (MR1 SP3.2) or 2.2 before 2.2.0.19078 (MR2 SP0.2) has improper NFS access control. This allows remote authenticated users to read or modify files via NFSv2...
ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability EMC Identifier: ESA-2012-027 CVE Identifier: CVE-2012-2282 Severity Rating: CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC Celerra Network Server...