EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Networker | Emc | 7.5.2.0 (including) | 7.5.2.0 (including) |
| Networker | Emc | 7.5.2.1 (including) | 7.5.2.1 (including) |
| Networker | Emc | 7.5.2.2 (including) | 7.5.2.2 (including) |
| Networker | Emc | 7.5.2.3 (including) | 7.5.2.3 (including) |
| Networker | Emc | 7.5.2.4 (including) | 7.5.2.4 (including) |
| Networker | Emc | 7.5.3 (including) | 7.5.3 (including) |
| Networker | Emc | 7.5.3.1 (including) | 7.5.3.1 (including) |
| Networker | Emc | 7.5.3.2 (including) | 7.5.3.2 (including) |
| Networker | Emc | 7.5.3.3 (including) | 7.5.3.3 (including) |
| Networker | Emc | 7.5.3.4 (including) | 7.5.3.4 (including) |
| Networker | Emc | 7.5.3.5 (including) | 7.5.3.5 (including) |
| Networker | Emc | 7.5.4 (including) | 7.5.4 (including) |
| Networker | Emc | 7.5.4.1 (including) | 7.5.4.1 (including) |
| Networker | Emc | 7.5.4.2 (including) | 7.5.4.2 (including) |
References
- http://secunia.com/advisories/44237
- http://securityreason.com/securityalert/8214
- http://securitytracker.com/id?1025383
- http://www.securityfocus.com/archive/1/517532/100/0/threaded
- http://www.securityfocus.com/bid/47410
- http://www.vupen.com/english/advisories/2011/1025
- http://secunia.com/advisories/44237
- http://securityreason.com/securityalert/8214
- http://securitytracker.com/id?1025383
- http://www.securityfocus.com/archive/1/517532/100/0/threaded
- http://www.securityfocus.com/bid/47410
- http://www.vupen.com/english/advisories/2011/1025