Arkeia Security Vulnerabilities - February

CVE-1999-0788

Arkiea nlservd allows remote attackers to conduct a denial of service.

CVE-1999-1534

Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.

CVE-2001-0968

Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.

CVE-2001-0988

Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.