Login Request a demo
Unscored severity · published Aug 23, 2005
CVE-2005-0357
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication…
–
CVSS
4.5%
EPSS
No
On KEV
Description
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LN
Legato Networker · Emc
4.2.2; 6.0; 6.1; 7.2; 7.13 · source: NVD
SB
Solstice Backup · Sun
6.0; 6.1 · source: NVD
SE
Storedge Enterprise Backup Software · Sun
7.0; 7.1; 7.2 · source: NVD
Affected product
LN
Legato Networker
Emc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0357
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0357
Patch
http://secunia.com/advisories/16464
Vendor Advisory
http://secunia.com/advisories/16470
Patch
http://securitytracker.com/id?1014713
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1
Patch
http://www.kb.cert.org/vuls/id/606857
Patch
http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm
More from Legato Networker
–
CVE-2009-2754
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix…
–
CVE-2007-3618
Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or…
–
CVE-2005-3658
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1…
–
CVE-2005-3659
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise…
–
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to…