PT-2008-6537 · Emc · Emc Control Center

Publicado 2008-12-10 · Atualizado 2018-10-11 · CVE-2008-5420

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Control Center versions prior to 6.1

Description The issue concerns the SAN Manager Master Agent service, which does not properly authenticate certain requests. This allows remote attackers to read arbitrary files.

Recommendations For versions prior to 6.1, update to version 6.1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-5420

Produtos afetados

Emc Control Center

Referências · 10

• http://securityfocus.com/archive/1/498556/100/0/threaded · Nota
• http://securityfocus.com/bid/32392 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5420 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-08-076 · Nota
• http://vupen.com/english/advisories/2008/3220 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46753 · Nota
• http://securitytracker.com/id?1021263 · Nota
• http://secunia.com/advisories/32801 · Aviso do Fabricante
• http://securityreason.com/securityalert/4709 · Nota
• http://osvdb.org/50032 · Nota