AOH :: HP Unsorted E :: VA3110.HTM

EMC RepliStor Buffer Overflow Vulnerability



FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability
FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability


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The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.