2574 matches found
CVE-2014-0880
IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...
Code injection
IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...
CVE-2014-0880
CVE-2014-0880 affects IBM SAN Volume Controller and Storwize family (V3500/V3700/V5000/V7000 and Flex System V7000; Lenovo/IBM code lines 6.3–7.2). Root cause: an unauthorized network-grade user can access the system’s administrative IP and gain CLI access, enabling issuance of all administrative...
CVE-2014-0880
IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...
Multiple IBM Products CVE-2014-0880 Security Bypass Vulnerability
Description Multiple IBM Products are prone to a security bypass vulnerability. Attackers can exploit this issue to bypass security restrictions to perform unauthorized actions; this may aid in launching further attacks. The following products are vulnerable: IBM SAN Volume Controller 6.3, 6.4,...
NTP Amplification DDoS Attacks Increasing
An ever-shrinking number of vulnerable network time protocol NTP servers are being used with customized distributed denial of service DDoS toolkits to perform increasingly potent NTP amplification attacks. According to the DDoS mitigation specialists at Prolexic, who issued a high alert DDoS atta...
Printer Volume Listing Scanner
This module lists the volumes on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Volume Listing...
Seagate BlackArmor NAS sg2000-2000.1331 - Cross-Site Request Forgery
Seagate BlackArmor NAS sg2000-2000.1331 - Cross-Site Request Forgery Exploit Title: Seagate BlackArmor NAS - Cross Site Request Forgery Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link:...
Seagate BlackArmor NAS sg2000-2000.1331 - Cross-Site Request Forgery
Exploit Title: Seagate BlackArmor NAS - Cross Site Request Forgery Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link: http://www.seagate.com/support/downloads/item/banas-220-firmware-master-dl/ Version: sg2000-2000.1331...
Hyper-V backup job fails to create shadow copy with default shadow storage limit
Challenge Backup or replication of a Hyper-V VM fails. In the Windows event logs on the Hyper-V host server, there is an error with ID 8193 from source VSS: Volume Shadow Copy Service error: Unexpected error calling routine Cannot find anymore diff area candidates for volume...
DEBIAN-CVE-2013-4135
The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...
Persistent Payload In Windows Volume Shadow Copy
This Metasploit module will attempt to create a persistent payload in a new volume shadow copy. This is based on the VSSOwn Script originally posted by Tim Tomes and Mark Baggett. This Metasploit module has been tested successfully on Windows 7. In order to achieve persistence through the RUNKEY...
Persistent Payload In Windows Volume Shadow Copy
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/exploit/exe' class...
DEBIAN-CVE-2013-4202
The 1 backup api/contrib/backups.py and 2 volume transfer contrib/volumetransfer.py APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an...
PYSEC-2013-35
The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...
Moderate: Red Hat Security Advisory: Red Hat Storage Console 2.1 security update
Updated Red Hat Storage Console packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Storage Server 2.1. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...
PT-2013-4893
Name of the Vulnerable Software and Affected Versions OpenStack Cinder versions 2013.1.3 and earlier Description The issue affects the backup API api/contrib/backups.py and volume transfer API contrib/volume transfer.py in OpenStack Cinder, allowing remote attackers to cause a denial of service...
Low: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #6
Updated Red Hat Storage 2.0 packages that fix multiple security issues, various bugs, and add one enhancement are now available. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
OpenStack: Cinder Denial of Service using XML entities
The 1 backup api/contrib/backups.py and 2 volume transfer contrib/volumetransfer.py APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an...
OpenStack Cinder 信息泄漏漏洞(CVE-2013-4183)
Bugtraq ID:61689 CVE ID:CVE-2013-4183 OpenStack Cinder是为Openstack提供块存储的功能 OpenStack Cinder LVM卷驱动存在一个安全漏洞，当配置了安全删除secure delete时LVM快照内容可能没有正确删除清除，可导致这些数据泄漏给之后租此服务器的租户 0 OpenStack Cinder 厂商解决方案 用户可参考如下厂商提供的安全补丁以修复该漏洞： Havana development branch fix: https://review.openstack.org/36506 Grizzly fix:...