EUVD-2013-0951

Malware in sbrugna...

Code injection

The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2013-0940

Summary: CVE-2013-0940 affects the EMC NetWorker client’s nsrpush process. Affected versions: before 7.6.5.3 and 8.x before 8.0.1.4. Root cause: the nsrpush process sets weak permissions on unspecified files, enabling local privilege escalation (via unspecified/unknown vectors). Impact (as stated...