Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14346 State: PUBLISHED Published: 2017-09-12T18:00:00Z Last Updated: 2024-09-17T01:36:10.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/tianchoy-blog-getshell.md
CVE ID: CVE-2017-14347 State: PUBLISHED Published: 2017-09-12T19:00:00 Last Updated: 2024-08-05T19:27:39.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yangchonghui2017/cve/blob/master/1.txt
CVE ID: CVE-2017-14348 State: PUBLISHED Published: 2017-09-12T19:00:00 Last Updated: 2024-08-05T19:27:39.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/issues/100 - http://www.securityfocus.com/bid/100866
CVE ID: CVE-2017-14349 State: PUBLISHED Published: 2017-09-29T14:00:00 Last Updated: 2024-08-05T19:27:39.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.auscert.org.au/bulletins/52758 - https://softwaresupport.hpe.com/km/KM02948051 - http://www.securityfocus.com/bid/100989
CVE ID: CVE-2017-14350 State: PUBLISHED Published: 2017-09-29T15:00:00Z Last Updated: 2024-09-16T20:51:56.794Z Vendors: Micro Focus Products: HPE Application Performance Management (APM) Problem Types: Remote Code Execution Description: A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-825/ - http://www.securityfocus.com/bid/100988 - https://softwaresupport.hpe.com/km/KM02960811
CVE ID: CVE-2017-14351 State: PUBLISHED Published: 2017-09-29T19:00:00 Last Updated: 2024-08-05T19:27:39.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02968622 - https://www.tenable.com/security/research/tra-2017-32
CVE ID: CVE-2017-14352 State: PUBLISHED Published: 2017-09-29T19:00:00 Last Updated: 2024-08-05T19:27:39.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02968622 - http://www.securityfocus.com/bid/101154
CVE ID: CVE-2017-14353 State: PUBLISHED Published: 2017-10-05T15:00:00 Last Updated: 2024-08-05T19:27:39.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101251 - https://www.tenable.com/security/research/tra-2017-32 - https://softwaresupport.hpe.com/km/KM02977984 - https://www.auscert.org.au/bulletins/53150
CVE ID: CVE-2017-14354 State: PUBLISHED Published: 2017-10-05T15:00:00 Last Updated: 2024-08-05T19:27:40.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101254 - https://www.tenable.com/security/research/tra-2017-32 - https://softwaresupport.hpe.com/km/KM02977984 - https://www.auscert.org.au/bulletins/53150
CVE ID: CVE-2017-14355 State: PUBLISHED Published: 2017-12-05T21:00:00 Last Updated: 2024-08-05T19:27:40.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability could be exploited locally to allow escalation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02987868 - https://www.exploit-db.com/exploits/43857/ - http://www.securityfocus.com/bid/101270 - http://seclists.org/bugtraq/2017/Oct/23
CVE ID: CVE-2017-14356 State: PUBLISHED Published: 2017-10-31T15:00:00Z Last Updated: 2024-09-16T17:42:51.254Z Vendors: Micro Focus Products: HP ArcSight ESM, HP ArcSight ESM Express Problem Types: SQL Injection Description: An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02996760 - https://www.auscert.org.au/bulletins/54166 - http://www.securityfocus.com/bid/101627
CVE ID: CVE-2017-14357 State: PUBLISHED Published: 2017-10-31T15:00:00Z Last Updated: 2024-09-17T03:12:31.982Z Vendors: Micro Focus Products: HP ArcSight ESM, HP ArcSight ESM Express Problem Types: Reflected and Stored Cross-Site Scripting (XSS) Description: A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS) Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02996760 - https://www.auscert.org.au/bulletins/54166
CVE ID: CVE-2017-14358 State: PUBLISHED Published: 2017-10-31T15:00:00Z Last Updated: 2024-09-16T16:58:44.268Z Vendors: Micro Focus Products: HP ArcSight ESM, HP ArcSight ESM Express Problem Types: URL redirection Description: A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/km/KM02996760 - https://www.auscert.org.au/bulletins/54166
CVE ID: CVE-2017-14359 State: PUBLISHED Published: 2017-11-03T18:00:00 Last Updated: 2024-08-05T19:27:40.055Z Vendors: Micro Focus Products: HPE Performance Center Problem Types: Remote Cross-Site Scripting Description: A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02996754 - http://www.securityfocus.com/bid/101659
CVE ID: CVE-2017-14360 State: PUBLISHED Published: 2017-11-08T14:00:00 Last Updated: 2024-08-05T19:27:40.111Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Micro Focus Products: HPE Content Manager Workgroup Service Problem Types: Denial of Service (DoS) Description: A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101792 - https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03006302
CVE ID: CVE-2017-14361 State: PUBLISHED Published: 2017-12-13T01:00:00Z Last Updated: 2024-09-16T23:05:58.739Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Micro Focus Products: Project and Portfolio Management Center Problem Types: Man-In-The-Middle attack (MitM) Description: Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040088 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426
CVE ID: CVE-2017-14362 State: PUBLISHED Published: 2017-12-13T01:00:00Z Last Updated: 2024-09-17T04:09:07.045Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Micro Focus Products: Project and Portfolio Management Center Problem Types: Cross-Site Request Forgery (CSRF) Description: Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040088 - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03014426
CVE ID: CVE-2017-14363 State: PUBLISHED Published: 2017-12-21T22:00:00Z Last Updated: 2024-09-17T00:26:41.389Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: Micro Focus Products: Operations Manager i Problem Types: Cross-Site Scripting (XSS) Description: Cross-Site Scripting (XSS) vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03060545
CVE ID: CVE-2017-14369 State: PUBLISHED Published: 2017-10-11T19:00:00 Last Updated: 2024-08-05T19:27:40.164Z Vendors: n/a Products: RSA Archer GRC Platform prior to 6.2.0.5 Problem Types: Privilege Escalation Vulnerability Description: RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A low privileged RSA Archer user may potentially exploit this vulnerability to elevate their privileges and export certain application records. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101195 - http://www.securitytracker.com/id/1039518 - http://seclists.org/fulldisclosure/2017/Oct/12
CVE ID: CVE-2017-14370 State: PUBLISHED Published: 2017-10-11T19:00:00 Last Updated: 2024-08-05T19:27:40.333Z Vendors: n/a Products: RSA Archer GRC Platform versions prior to 6.2.0.5 Problem Types: Stored Cross Site Scripting Description: RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039518 - http://seclists.org/fulldisclosure/2017/Oct/12
CVE ID: CVE-2017-14371 State: PUBLISHED Published: 2017-10-11T19:00:00 Last Updated: 2024-08-05T19:27:40.481Z Vendors: n/a Products: RSA Archer GRC Platform prior to 6.2.0.5 Problem Types: Reflected Cross Site Scripting Description: RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101195 - http://www.securitytracker.com/id/1039518 - http://seclists.org/fulldisclosure/2017/Oct/12
CVE ID: CVE-2017-14372 State: PUBLISHED Published: 2017-10-11T19:00:00 Last Updated: 2024-08-05T19:27:40.377Z Vendors: n/a Products: RSA Archer GRC Platform prior to 6.2.0.5 Problem Types: Reflected Cross Site Scripting Description: RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101195 - http://www.securitytracker.com/id/1039518 - http://seclists.org/fulldi
nces: - http://www.securityfocus.com/bid/101195 - http://www.securitytracker.com/id/1039518 - http://seclists.org/fulldisclosure/2017/Oct/12
CVE ID: CVE-2017-14373 State: PUBLISHED Published: 2017-10-31T07:00:00 Last Updated: 2024-08-05T19:27:40.452Z Vendors: n/a Products: RSA Authentication Manager 8.2 SP1 P4 and earlier Problem Types: Reflected Cross-Site Scripting Vulnerability Description: EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039680 - http://seclists.org/fulldisclosure/2017/Oct/62 - http://www.securityfocus.com/bid/101605
CVE ID: CVE-2017-14374 State: PUBLISHED Published: 2017-12-06T00:00:00 Last Updated: 2024-08-05T19:27:40.419Z Vendors: n/a Products: Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20 Problem Types: Hard-coded Password Vulnerability Description: The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable t
SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance). Additional Analyst Notes: - CVE Program Container: References: - http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf
CVE ID: CVE-2017-14375 State: PUBLISHED Published: 2017-11-01T01:00:00 Last Updated: 2024-08-05T19:27:40.287Z Vendors: n/a Products: EMC VMAX Virtual Appliance (vApp) EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) Problem Types: Authentication Bypass Vulnerability Description: EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VA
Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) contain an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101673 - http://seclists.org/fulldisclosure/2017/Oct/70 - http://www.securitytracker.com/id/1039704
CVE ID: CVE-2017-14376 State: PUBLISHED Published: 2017-11-01T01:00:00 Last Updated: 2024-08-05T19:27:40.314Z Vendors: n/a Products: EMC AppSync Server versions prior to 3.5.0.1 Problem Types: Hardcoded Password Vulnerability Description: EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101626 - http://seclists.org/fulldisclosure/2017/Oct/68
CVE ID: CVE-2017-14377 State: PUBLISHED Published: 2017-11-29T18:00:00 Last Updated: 2024-08-05T19:27:40.002Z Vendors: n/a Products: RSA Authentication Agent for Web for Apache Web Server RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 Problem Types: Authentication Bypass Vulnerability Description: EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to authentication bypass. Additional Analyst Notes: - CVE Program Container: Ref
lnerability that could potentially lead to authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039876 - http://www.securityfocus.com/bid/101980 - http://seclists.org/fulldisclosure/2017/Nov/46
CVE ID: CVE-2017-14378 State: PUBLISHED Published: 2017-11-29T18:00:00 Last Updated: 2024-08-05T19:27:40.357Z Vendors: n/a Products: RSA Authentication Agent SDK RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C Problem Types: Error Handling Vulnerability Description: EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039877 - http://seclists.org/fulldisclosure/2017/Nov/48 - http://www.securityfocus.com/bid/101979
CVE ID: CVE-2017-14379 State: PUBLISHED Published: 2017-11-28T07:00:00 Last Updated: 2024-08-05T19:27:40.047Z Vendors: n/a Products: RSA Authentication Manager software version 8.2 SP1 P5 and earlier Problem Types: Stored Cross-Site Scripting Vulnerability Description: EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039853 - http://www.securityfocus.com/bid/101925 - http://seclists.org/fulldisclosure/2017/Nov/34
CVE ID: CVE-2017-14380 State: PUBLISHED Published: 2017-12-13T20:00:00 Last Updated: 2024-08-05T19:27:40.598Z Vendors: n/a Products: EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x Problem Types: Privilege Escalation Vulnerability Description: In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and v
t on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Dec/41 - http://www.securityfocus.com/bid/102210
CVE ID: CVE-2017-14381 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14382 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-14383 State: PUBLISHED Published: 2018-01-04T06:00:00 Last Updated: 2024-08-05T19:27:40.534Z Vendors: n/a Products: Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and Dell EMC VNX1 versions prior to Operating Environment for File 7.1.80.8 Problem Types: Reflected Cross Site Scripting Vulnerability Description: In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute a
ite scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary HTML code in the user's browser session in the context of the affected web application. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Dec/87
CVE ID: CVE-2017-14384 State: PUBLISHED Published: 2018-03-16T20:00:00Z Last Updated: 2024-09-16T22:30:59.956Z Vendors: Dell EMC Products: Dell Storage Manager Problem Types: Directory traversal vulnerability Description: In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.c
iles via this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103467 - http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf
CVE ID: CVE-2017-14385 State: PUBLISHED Published: 2017-12-20T23:00:00 Last Updated: 2024-08-05T19:27:40.141Z Vendors: n/a Products: EMC Data Domain DD OS EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6, EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9, EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21, EMC Data Domain Virtual Edition 2.0 family, all versions, EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1, EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2 Problem Types: Memory Overflow Vulnerability Description: An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EM
ow Vulnerability Description: An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1; and EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2. EMC Data Domain DD OS contains a memory overflow vulnerability in SMBv1 which may potentially be exploited by an unauthenticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication.
ticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication. This may also allow remote code injection and execution. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Dec/79 - http://www.securitytracker.com/id/1040027 - http://www.securityfocus.com/bid/102289