CVEvulnerability
CVE-2005-0358
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
Affected configurations
• emc legato networker 4.2.2
• emc legato networker 6.0
• emc legato networker 6.1
• emc legato networker 7.2
• emc legato networker 7.13
• sun solstice backup 6.0
• sun solstice backup 6.1
• sun storedge enterprise backup software 7.0
• sun storedge enterprise backup software 7.1
• sun storedge enterprise backup software 7.2
References
- http://secunia.com/advisories/16464 Patch, Vendor Advisory
- http://secunia.com/advisories/16470 Vendor Advisory
- http://securitytracker.com/id?1014713 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/407641 Patch, Third Party Advisory, US Government Resource
- http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm www.legato.com
- http://www.osvdb.org/18801 www.osvdb.org
- http://www.securityfocus.com/bid/14582 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21892 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/16464 Patch, Vendor Advisory
- http://secunia.com/advisories/16470 Vendor Advisory
- http://securitytracker.com/id?1014713 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/407641 Patch, Third Party Advisory, US Government Resource
- http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm www.legato.com
- http://www.osvdb.org/18801 www.osvdb.org
- http://www.securityfocus.com/bid/14582 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21892 exchange.xforce.ibmcloud.com