NVD

Id
66118  
Name
CVE-2005-0357  
Description
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-08-23  
Modified Date
2017-07-10  
Seq
2005-0357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344378 66118 CVE-2005-0357 1014713  View
344379 66118 CVE-2005-0357 101886  View
344380 66118 CVE-2005-0357 VU#606857  View
344381 66118 CVE-2005-0357 http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm  View
344382 66118 CVE-2005-0357 14582  View
344383 66118 CVE-2005-0357 legato-authunix-bypass-authentication(21887)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62611 JVNDB-2005-000826 EMC Legato NetWorker の認証機構に関する脆弱性 EMC Legato NetWorker では AUTH_UNIX 認証を用いています。AUTH_UNIX 認証は、遠隔ホストから RPC で接続を要求してくるクライアントプロセスの認証を、遠隔ホスト上にログインしているユーザ名や UID で行ないます。 CVE-2005-0357 11561 CVE-2005-0357 66118 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000826.html 2005-08-18 2008-11-21 View