CVE-2017-14385

The CVE affects EMC Data Domain DD OS and EMC Data Domain Virtual Edition. A memory overflow vulnerability in SMBv1 exists in DD OS across multiple families, including 5.7 (<5.7.5.6), 6.0 (<6.0.2.9), 6.1 (<6.1.0.21), and all VE versions (2.0, 3.0 <3.0 SP2 Update 1, 3.1

CVE-2016-0910

The CVE-2016-0910 entry concerns EMC Data Domain OS. Affected versions are 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0. The vulnerability arises because GUI session identifiers are stored in a world-readable file, enabling a local attacker to hijack arbitrary accounts via uns...