CVE-2008-0961

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=683Broken Link
http://secunia.com/advisories/29778Broken Link, Vendor Advisory
http://www.osvdb.org/44419Broken Link
http://www.securityfocus.com/bid/28727Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1019827Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1198/referencesBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/41772Third Party Advisory, VDB Entry
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=683Broken Link
http://secunia.com/advisories/29778Broken Link, Vendor Advisory
http://www.osvdb.org/44419Broken Link
http://www.securityfocus.com/bid/28727Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1019827Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/1198/referencesBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/41772Third Party Advisory, VDB Entry

Timeline

Published: Apr 14, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-09629.0Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary c CVE-2008-09639.0Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted CVE-2008-09649.3Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, all CVE-2008-09659.3Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, al CVE-2008-09676.9Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMw CVE-2008-09713.5Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before CVE-2008-09737.5Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to ha CVE-2008-09745.0Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to CVE-2008-09755.0Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to CVE-2008-09765.0Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to CVE-2008-09775.0Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to CVE-2008-09785.0Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to