|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
Legato NetWorker contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the AUTH_UNIX authentication mechanism used for RPC services allows username spoofing by remote users in the nwadmin, nsradmin, and nsrports programs, or UID spoofing in the recover and nsrexecd programs. This flaw may allow a remote attacker to execute arbitrary commands on a NetWorker client system, modify the NetWorker server configuration, and view backed up files from any system, leading to a loss of confidentiality, integrity and availability.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, EMC and Sun have released patches to address this vulnerability.
|
|
Products |
|
StorEdge Enterprise Backup Software
 |
7.0 |
7.1 |
7.2 |
Solstice Backup
|
6.0 |
6.1 |
|
Legato NetWorker
|
7.2 |
7.13 |
4.2.2 |
6.0 |
6.1 |
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
