CVE

Id
11563  
CVE No.
CVE-2005-0357  
Status
Candidate  
Description
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.  
Phase
Assigned (20050211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
82625 11563 CVE-2005-0357 CONFIRM:http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm  View
82626 11563 CVE-2005-0357 SUNALERT:101886  View
82627 11563 CVE-2005-0357 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1  View
82628 11563 CVE-2005-0357 CERT-VN:VU#606857  View
82629 11563 CVE-2005-0357 URL:http://www.kb.cert.org/vuls/id/606857  View
82630 11563 CVE-2005-0357 BID:14582  View
82631 11563 CVE-2005-0357 URL:http://www.securityfocus.com/bid/14582  View
82632 11563 CVE-2005-0357 OSVDB:18800  View
82633 11563 CVE-2005-0357 URL:http://www.osvdb.org/18800  View
82634 11563 CVE-2005-0357 SECTRACK:1014713  View
82635 11563 CVE-2005-0357 URL:http://securitytracker.com/id?1014713  View
82636 11563 CVE-2005-0357 SECUNIA:16470  View
82637 11563 CVE-2005-0357 URL:http://secunia.com/advisories/16470  View
82638 11563 CVE-2005-0357 SECUNIA:16464  View
82639 11563 CVE-2005-0357 URL:http://secunia.com/advisories/16464  View
82640 11563 CVE-2005-0357 XF:legato-authunix-bypass-authentication(21887)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62610 JVNDB-2005-000825 EMC Legato NetWorker の portmapper にリモートからの要求を実行する脆弱性 EMC Legato NetWorker の portmapper の実装 lgtomapper には、遠隔のホストから pmap_set() や pmap_unset() を実行できる脆弱性が存在します。 CVE-2005-0359 11563 6.4 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000825.html  View