Titon

**Name of the Vulnerable Software and Affected Versions** HP StorageWorks Storage Mirroring (SWSM) versions prior to 4.5 SP2 **Description** The issue is related to a stack-based buffer overflow in DoubleTake.exe, which allows remote attackers to execute arbitrary code via a crafted encoded authentication request. **Recommendations** For versions prior to 4.5 SP2, update to version 4.5 SP2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Timbuktu Pro versions 8.6.5 **Description** A directory traversal issue in the Notes feature of Timbuktu Pro allows remote attackers to upload files to arbitrary locations by using a destination filename with a (backslash) character followed by ../ (dot dot slash) sequences. This can potentially be leveraged for code execution by writing to a Startup folder. **Recommendations** For version 8.6.5, consider restricting access to the Notes feature until a fix is available. As a temporary workaround, avoid using the Notes feature to upload files to sensitive locations.

**Name of the Vulnerable Software and Affected Versions** Symantec Backup Exec System Recovery Manager versions 7.0 through 7.0.1 **Description** The issue is related to an unrestricted file upload vulnerability in the FileUpload class of the Symantec LiveState Apache Tomcat server. This vulnerability allows remote attackers to upload and execute arbitrary JSP files. **Recommendations** For Symantec Backup Exec System Recovery Manager versions 7.0 through 7.0.1, consider restricting access to the FileUpload class as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** eIQnetworks Enterprise Security Analyzer (ESA) versions prior to 2.5.0 **Description** The issue allows remote attackers to execute arbitrary code via long commands to various servers, including the Syslog daemon, Topology server, License Manager, and Monitoring agent. The affected commands include `DELTAINTERVAL`, `LOGFOLDER`, `DELETELOGS`, `FWASERVER`, `SYSLOGPUBLICIP`, `GETFWAIMPORTLOG`, `GETFWADELTA`, `DELETERDEPDEVICE`, `COMPRESSRAWLOGFILE`, `GETSYSLOGFIREWALLS`, `ADDPOLICY`, `EDITPOLICY`, `GUIADDDEVICE`, `ADDDEVICE`, `DELETEDEVICE`, `LICMGR ADDLICENSE`, `TRACE`, and `QUERYMONITOR`. **Recommendations** For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable commands and servers, such as the Syslog daemon, Topology server, License Manager, and Monitoring agent, until a patch is available. Avoid using long commands to these servers to minimize the risk of exploitation.