CVE Vulnerabilities

CVE-2005-0357

Published: Aug 23, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

Affected Software

Name Vendor Start Version End Version
Legato_networker Emc 6.0 6.0
Legato_networker Emc 7.2 7.2
Legato_networker Emc 4.2.2 4.2.2
Storedge_enterprise_backup_software Sun 7.0 7.0
Storedge_enterprise_backup_software Sun 7.1 7.1
Storedge_enterprise_backup_software Sun 7.2 7.2
Solstice_backup Sun 6.1 6.1
Legato_networker Emc 7.13 7.13
Solstice_backup Sun 6.0 6.0
Legato_networker Emc 6.1 6.1

References