CVE-2005-0357: High severity EMC Legato NetWorker vulnerability
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTHUNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0357?
CVE-2005-0357 is considered a high severity vulnerability that allows remote authentication bypass.
How do I fix CVE-2005-0357?
To fix CVE-2005-0357, you should update or patch the affected software to a version that mitigates this vulnerability.
Which software versions are affected by CVE-2005-0357?
CVE-2005-0357 affects EMC Legato NetWorker versions 4.2.2, 6.0, 6.1, and 7.2, as well as Sun Solstice Backup versions 6.0 and 6.1.
What type of authentication is exploited in CVE-2005-0357?
CVE-2005-0357 exploits the AUTH_UNIX authentication method, which relies on user ID for authentication.
Can an attacker gain privileges through CVE-2005-0357?
Yes, an attacker can gain unauthorized privileges by spoofing a username or UID due to the vulnerability in CVE-2005-0357.