619 matches found
EMC Legato Networker Multiple Vulnerabilities
The remote host is running one of the following products : - Legato Networker - Sun StorEdge Enterprise Backup Software - Sun Solstice Backup Software - Informix Storage Manager The installed version of this software is vulnerable to denial of service, unauthorized access and remote command...
EMC Legato Networker Detection
The remote host is running EMC Legato Networker backup software or one of these variants : - Sun StorEdge Enterprise Backup Software - Sun Solstice Backup Software - Informix Storage Manager C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19557; scriptversion"1.12";...
CVE-2005-0357
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTHUNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID...
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token...
CVE-2005-0359
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...
CVE-2005-0359
CVE-2005-0359 is documented in the connected Nessus plugins as affecting EMC Legato NetWorker and related Sun StorEdge/Sun Solstice/Informix Storage Manager products. The entries describe multiple vulnerabilities that can lead to denial of service, unauthorized access and remote command execution...
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token...
CVE-2005-0357
The CVE applies to EMC Legato NetWorker, Sun Solstice Backup 6.0–6.1, and StorEdge Enterprise Backup 7.0–7.2, which rely on AUTH_UNIX authentication based on user IDs. The underlying issue allows remote attackers to bypass authentication by spoofing a username or UID, enabling privilege escalatio...
CVE-2005-0358
The provided documents confirm concrete details for CVE-2005-0358. Affected software includes EMC Legato Networker, Sun StorEdge Enterprise Backup, and related Solstice Backup line, with the root cause described as improper verification of authentication tokens that can allow remote privilege mod...
CVE-2005-0359
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...
CVE-2005-0357: Undefined Security Weakness
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTHUNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID...
CVE-2005-0359: Undefined Security Weakness
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...
CVE-2005-0358: Undefined Security Weakness
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token...
[SA16464] Legato NetWorker Multiple Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
EMC Legato NetWorker portmapper allows remote calls to "pmap_set" and "pmap_unset"
Overview The EMC Legato NetWorker PortMapper allows remote access to pmapset and pmapunset. This could allow a remote attacker to cause a denial of service or potentially to eavesdrop on communications between NetWorker programs. Description EMC Legato NetWorker is a cross-platform backup and...
EMC Legato NetWorker uses weak AUTH_UNIX authentication
Overview EMC Legato NetWorker uses weak AUTHUNIX authentication, allowing a remote attacker to execute arbitrary commands, gain elevated privileges, or cause a denial of service. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun...
EMC Legato NetWorker database services use insufficient authentication
Overview The EMC Legato NetWorker database services use weak authentication, allowing a remote attacker to gain root access to the server. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun Microsystems as Solstice Backup and StorEdg...
Networker 6.0 - possible symlink attack
product: networker 6.0 date: 19.01.2003 author: l0om [email protected] possible symlink attack in shutdown scribt the networker is a backup and storeage system from fujitsu siemens. the shutdown nsrshutdown scribt from networker version 6.0 contains a the following: zeroworklist ... rm -f...