Lucene search

[email protected]CVE-2005-0358

HistoryAug 23, 2005 - 4:00 a.m.

CVE-2005-0358

2005-08-2304:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

emc

legato networker

solstice backup

storedge

enterprise backup

authentication

vulnerability

cve-2005-0358

nvd

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.033 Low

EPSS

Percentile

91.2%

JSON

EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.

CPENameOperatorVersion
emc:legato_networkeremc legato networkereq6.0
emc:legato_networkeremc legato networkereq7.2
emc:legato_networkeremc legato networkereq4.2.2
sun:storedge_enterprise_backup_softwaresun storedge enterprise backup softwareeq7.0
sun:storedge_enterprise_backup_softwaresun storedge enterprise backup softwareeq7.1
sun:storedge_enterprise_backup_softwaresun storedge enterprise backup softwareeq7.2
sun:solstice_backupsun solstice backupeq6.1
emc:legato_networkeremc legato networkereq7.13
sun:solstice_backupsun solstice backupeq6.0
emc:legato_networkeremc legato networkereq6.1

CPE	Name	Operator	Version
emc:legato_networker	emc legato networker	eq	6.0
emc:legato_networker	emc legato networker	eq	7.2
emc:legato_networker	emc legato networker	eq	4.2.2
sun:storedge_enterprise_backup_software	sun storedge enterprise backup software	eq	7.0
sun:storedge_enterprise_backup_software	sun storedge enterprise backup software	eq	7.1
sun:storedge_enterprise_backup_software	sun storedge enterprise backup software	eq	7.2
sun:solstice_backup	sun solstice backup	eq	6.1
emc:legato_networker	emc legato networker	eq	7.13
sun:solstice_backup	sun solstice backup	eq	6.0
emc:legato_networker	emc legato networker	eq	6.1

References

secunia.com/advisories/16464

secunia.com/advisories/16470

securitytracker.com/id?1014713

sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1

www.kb.cert.org/vuls/id/407641

www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm

www.osvdb.org/18801

www.securityfocus.com/bid/14582

exchange.xforce.ibmcloud.com/vulnerabilities/21892

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.033 Low

EPSS

Percentile

91.2%

JSON

Related for CVE-2005-0358

cvelist1 cert1 nessus10