CVE-2011-1421: Medium severity networker vulnerability
Published Apr 22, 2011
·Updated
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors.
Affected Software
29 affected components
EMC NetWorker=7.5.2.0
EMC NetWorker=7.5.2.1
EMC NetWorker=7.5.2.2
EMC NetWorker=7.5.2.3
EMC NetWorker=7.5.2.4
EMC NetWorker=7.5.3
EMC NetWorker=7.5.3.1
EMC NetWorker=7.5.3.2
EMC NetWorker=7.5.3.3
EMC NetWorker=7.5.3.4
EMC NetWorker=7.5.3.5
EMC NetWorker=7.5.4
EMC NetWorker=7.5.4.1
EMC NetWorker=7.5.4.2
EMC NetWorker=7.6
EMC NetWorker=7.6-sp1
EMC NetWorker=7.6.0.2
EMC NetWorker=7.6.0.3
EMC NetWorker=7.6.0.4
EMC NetWorker=7.6.0.5
EMC NetWorker=7.6.0.6
EMC NetWorker=7.6.0.7
EMC NetWorker=7.6.0.8
EMC NetWorker=7.6.0.9
EMC NetWorker=7.6.1
EMC NetWorker=7.6.1.1
EMC NetWorker=7.6.1.2
EMC NetWorker=7.6.1.3
EMC NetWorker=7.6.1.4
Event History
Apr 22, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1421?
CVE-2011-1421 has been rated as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2011-1421?
To mitigate CVE-2011-1421, ensure you upgrade to EMC NetWorker version 7.5.4.3 or 7.6.1.5 or later.
3
What versions of EMC NetWorker are affected by CVE-2011-1421?
CVE-2011-1421 affects EMC NetWorker versions 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5.
4
Can local users exploit CVE-2011-1421?
Yes, local users can exploit CVE-2011-1421 due to weak permissions associated with an unspecified file.
5
What impact does CVE-2011-1421 have on system security?
CVE-2011-1421 can allow unauthorized users to gain elevated privileges on systems running vulnerable versions of EMC NetWorker.