3 matches found
CVE-2016-0911
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default norootsquash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges...
PT-2016-4465
Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.4 through 5.7 before 5.7.2.0 Description The issue makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges due to a default no root squash option for NFS exports...
EMC Data Domain Insecure NFS Load Option Vulnerability
EMC Data Domain systems are data protection storage solutions. EMC Data Domain versions 5.4, 5.5, 5.6, and 5.7 have a security vulnerability that enables an administrator user to create NFS exports, and the default use of norootsquash also enables clients to load NFS exports with root privileges...