Vulnerability in Emc Legato Networker
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.
Affected products
- Emc Legato_networker — versions 4.2.2, 6.0, 6.1
- Sun Solstice_backup — versions 6.0, 6.1
- Sun Storedge_enterprise_backup_software — versions 7.0, 7.1, 7.2
- N/a — versions n/a
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (Patch, vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (vendor-advisory, Patch, x_refsource_SUNALERT, Vendor Advisory)
- cret@cert.org (x_refsource_OSVDB, vdb-entry)