Dell NetWorker < 19.14.0.1 Multiple Vulnerabilities (DSA-2026-253)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(379578);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/11/13");

  script_cve_id(
    "CVE-2010-5298",
    "CVE-2013-0249",
    "CVE-2013-1944",
    "CVE-2013-2174",
    "CVE-2013-4545",
    "CVE-2013-6422",
    "CVE-2014-0015",
    "CVE-2014-0138",
    "CVE-2014-0139",
    "CVE-2014-0195",
    "CVE-2014-0198",
    "CVE-2014-0221",
    "CVE-2014-0224",
    "CVE-2014-2522",
    "CVE-2014-3505",
    "CVE-2014-3506",
    "CVE-2014-3507",
    "CVE-2014-3508",
    "CVE-2014-3509",
    "CVE-2014-3510",
    "CVE-2014-3511",
    "CVE-2014-3512",
    "CVE-2014-3513",
    "CVE-2014-3566",
    "CVE-2014-3567",
    "CVE-2014-3568",
    "CVE-2014-3570",
    "CVE-2014-3571",
    "CVE-2014-3572",
    "CVE-2014-3613",
    "CVE-2014-3620",
    "CVE-2014-3707",
    "CVE-2014-5139",
    "CVE-2014-8150",
    "CVE-2014-8176",
    "CVE-2014-8275",
    "CVE-2015-0205",
    "CVE-2015-0206",
    "CVE-2015-0209",
    "CVE-2015-0286",
    "CVE-2015-0287",
    "CVE-2015-0288",
    "CVE-2015-0289",
    "CVE-2015-0292",
    "CVE-2015-0293",
    "CVE-2015-1788",
    "CVE-2015-1789",
    "CVE-2015-1791",
    "CVE-2015-1792",
    "CVE-2015-3143",
    "CVE-2015-3148",
    "CVE-2015-3153",
    "CVE-2015-3194",
    "CVE-2015-3195",
    "CVE-2015-3196",
    "CVE-2016-0702",
    "CVE-2016-0703",
    "CVE-2016-0704",
    "CVE-2016-0705",
    "CVE-2016-0754",
    "CVE-2016-0755",
    "CVE-2016-0797",
    "CVE-2016-0798",
    "CVE-2016-0799",
    "CVE-2016-2105",
    "CVE-2016-2106",
    "CVE-2016-2107",
    "CVE-2016-2108",
    "CVE-2016-2109",
    "CVE-2016-2176",
    "CVE-2016-2177",
    "CVE-2016-2178",
    "CVE-2016-2179",
    "CVE-2016-2180",
    "CVE-2016-2181",
    "CVE-2016-2182",
    "CVE-2016-2183",
    "CVE-2016-2842",
    "CVE-2016-3739",
    "CVE-2016-4606",
    "CVE-2016-4802",
    "CVE-2016-5419",
    "CVE-2016-5420",
    "CVE-2016-5421",
    "CVE-2016-6302",
    "CVE-2016-6303",
    "CVE-2016-6304",
    "CVE-2016-6306",
    "CVE-2016-7056",
    "CVE-2016-7141",
    "CVE-2016-7167",
    "CVE-2016-8615",
    "CVE-2016-8616",
    "CVE-2016-8617",
    "CVE-2016-8618",
    "CVE-2016-8619",
    "CVE-2016-8620",
    "CVE-2016-8621",
    "CVE-2016-8622",
    "CVE-2016-8623",
    "CVE-2016-8624",
    "CVE-2016-8625",
    "CVE-2016-9586",
    "CVE-2016-9594",
    "CVE-2017-2629",
    "CVE-2017-3735",
    "CVE-2017-8817",
    "CVE-2017-9502",
    "CVE-2017-1000100",
    "CVE-2017-1000254",
    "CVE-2017-1000257",
    "CVE-2018-14618",
    "CVE-2018-16842",
    "CVE-2018-1000007",
    "CVE-2018-1000120",
    "CVE-2018-1000121",
    "CVE-2018-1000122",
    "CVE-2018-1000301",
    "CVE-2019-5436",
    "CVE-2019-5443",
    "CVE-2019-5482",
    "CVE-2020-8177",
    "CVE-2020-8284",
    "CVE-2020-8285",
    "CVE-2021-4044",
    "CVE-2021-22876",
    "CVE-2021-22898",
    "CVE-2021-22922",
    "CVE-2021-22923",
    "CVE-2021-22924",
    "CVE-2021-22925",
    "CVE-2021-22946",
    "CVE-2021-22947",
    "CVE-2022-27774",
    "CVE-2022-27776",
    "CVE-2022-27781",
    "CVE-2022-27782",
    "CVE-2022-32206",
    "CVE-2022-32208",
    "CVE-2022-32221",
    "CVE-2022-35252",
    "CVE-2022-43552",
    "CVE-2023-0464",
    "CVE-2023-0465",
    "CVE-2023-0466",
    "CVE-2023-2650",
    "CVE-2023-3817",
    "CVE-2023-5678",
    "CVE-2023-27533",
    "CVE-2023-27534",
    "CVE-2023-27535",
    "CVE-2023-27536",
    "CVE-2023-27538",
    "CVE-2023-28319",
    "CVE-2023-28320",
    "CVE-2023-28321",
    "CVE-2023-28322",
    "CVE-2023-38546",
    "CVE-2024-0727",
    "CVE-2024-0853",
    "CVE-2024-2004",
    "CVE-2024-2398",
    "CVE-2024-2466",
    "CVE-2024-6119",
    "CVE-2024-7264",
    "CVE-2024-8096",
    "CVE-2024-9143",
    "CVE-2024-9681",
    "CVE-2024-11053",
    "CVE-2024-13176",
    "CVE-2025-0167",
    "CVE-2025-0725",
    "CVE-2025-4947",
    "CVE-2025-5025",
    "CVE-2025-9086",
    "CVE-2025-10148",
    "CVE-2025-10966",
    "CVE-2025-11187",
    "CVE-2025-13034",
    "CVE-2025-14017",
    "CVE-2025-14524",
    "CVE-2025-14819",
    "CVE-2025-15079",
    "CVE-2025-15224",
    "CVE-2025-15467",
    "CVE-2025-15468",
    "CVE-2025-15469",
    "CVE-2025-66199",
    "CVE-2025-68160",
    "CVE-2025-69418",
    "CVE-2025-69419",
    "CVE-2025-69420",
    "CVE-2025-69421",
    "CVE-2026-1965",
    "CVE-2026-3783",
    "CVE-2026-3784",
    "CVE-2026-3805",
    "CVE-2026-7383",
    "CVE-2026-9076",
    "CVE-2026-22763",
    "CVE-2026-22795",
    "CVE-2026-22796",
    "CVE-2026-28387",
    "CVE-2026-28388",
    "CVE-2026-28389",
    "CVE-2026-28390",
    "CVE-2026-31789",
    "CVE-2026-31790",
    "CVE-2026-34180",
    "CVE-2026-34182",
    "CVE-2026-42766",
    "CVE-2026-42767",
    "CVE-2026-42770",
    "CVE-2026-45445",
    "CVE-2026-45446",
    "CVE-2026-45447",
    "CVE-2026-49505"
  );
  script_xref(name:"CEA-ID", value:"CEA-2023-0052");
  script_xref(name:"CEA-ID", value:"CEA-2022-0026");
  script_xref(name:"IAVA", value:"2026-A-1276");

  script_name(english:"Dell NetWorker < 19.14.0.1 Multiple Vulnerabilities (DSA-2026-253)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Windows host has an application installed that is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Dell EMC NetWorker installed on the remote Windows host is prior to 19.14.0.1. It is, therefore,
affected by multiple vulnerabilities as referenced in the DSA-2026-253 advisory, including the following:

  - The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to
    execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY
    field in crafted serialized data, aka the 'negative zero' issue. (CVE-2016-2108)

  - Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1
    before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory
    corruption) or possibly have unspecified other impact via a malformed DSA private key. (CVE-2016-0705)

  - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. On systems
    with a 32 bit size_t, an integer overflow in Curl_ntlm_core_mk_nt_hash can cause a heap buffer overflow
    when the password length exceeds 2GB. (CVE-2018-14618)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported
version number.");
  # https://www.dell.com/support/kbdoc/en-us/000529808/dsa-2026-253-security-update-for-dell-networker-multiple-vulnerabilities
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?8ccd7b11");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Dell NetWorker version 19.14.0.1 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-14618");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2026-31789");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"exploit_framework_core", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/11/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/11/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/11/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:dell:networker");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("emc_networker_installed.nasl");
  script_require_keys("SMB/Registry/Enumerated", "installed_sw/EMC NetWorker");
  script_require_ports(139, 445);

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'EMC NetWorker', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'fixed_version': '19.14.0.1'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);