high7.5
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows re…
Impact
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Legato Networker | Versions 4.2.2, 6.0, 6.1, 7.2, 7.13 |
| Sun | Solstice Backup | Versions 6.0, 6.1 |
| Sun | Storedge Enterprise Backup Software | Versions 7.0, 7.1, 7.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16464
- http://secunia.com/advisories/16470
- http://securitytracker.com/id?1014713
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1
- http://www.kb.cert.org/vuls/id/407641
- http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm
- http://www.osvdb.org/18801
- http://www.securityfocus.com/bid/14582
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21892
- http://secunia.com/advisories/16464
- http://secunia.com/advisories/16470
- http://securitytracker.com/id?1014713
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1
- http://www.kb.cert.org/vuls/id/407641
- http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm
- http://www.osvdb.org/18801
- http://www.securityfocus.com/bid/14582
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21892