EMC Data Domain Privilege Escalation Vulnerability (ESA-2017-036)

# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:dell:powerprotect_data_domain";

if (description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.106806");
  script_version("2026-04-29T06:25:32+0000");
  script_tag(name:"last_modification", value:"2026-04-29 06:25:32 +0000 (Wed, 29 Apr 2026)");
  script_tag(name:"creation_date", value:"2017-05-16 16:28:36 +0700 (Tue, 16 May 2017)");
  script_tag(name:"cvss_base", value:"4.6");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:P/I:P/A:P");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2020-12-07 17:25:00 +0000 (Mon, 07 Dec 2020)");

  script_cve_id("CVE-2017-4983");

  script_tag(name:"qod_type", value:"remote_banner");

  script_tag(name:"solution_type", value:"VendorFix");

  script_name("EMC Data Domain Privilege Escalation Vulnerability (ESA-2017-036)");

  script_category(ACT_GATHER_INFO);

  script_copyright("Copyright (C) 2017 Greenbone AG");
  script_family("Privilege escalation");
  script_dependencies("gb_dell_powerprotect_data_domain_consolidation.nasl");
  script_mandatory_keys("dell/powerprotect/data_domain/detected");

  script_tag(name:"summary", value:"EMC Data Domain OS is affected by a privilege escalation
  vulnerability that may potentially be exploited by attackers to compromise the affected
  system.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"EMC Data Domain OS is potentially vulnerable to a privilege
  escalation vulnerability. A rogue administrator may be able to log in as the Security Office (SO)
  and escalate privileges by using SO user's public key that is stored unprotected on the Data
  Domain system.");

  script_tag(name:"affected", value:"EMC Data Domain OS 5.2.x, 5.4.x, 5.5.x, 5.6.x, 5.7.x and
  6.0.x.");

  script_tag(name:"solution", value:"Update to version 5.7.3.0, 6.0.1.0 or later.");

  script_xref(name:"URL", value:"http://seclists.org/bugtraq/2017/May/att-12/ESA-2017-036.txt");

  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if (!version = get_app_version(cpe: CPE, nofork: TRUE))
  exit(0);

if (version_is_less(version: version, test_version: "5.7.3.0")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "5.7.3.0");
  security_message(port: 0, data: report);
  exit(0);
}

if (version =~ "^6\.0\.0") {
  report = report_fixed_ver(installed_version: version, fixed_version: "6.0.1.0");
  security_message(port: 0, data: report);
  exit(0);
}

exit(99);