CVE-2013-0940: High severity EMC NetWorker vulnerability
Published May 3, 2013
·Updated
The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Affected Software
70 affected components
EMC NetWorker<=7.6.5.2
EMC NetWorker=6.0
EMC NetWorker=6.1
EMC NetWorker=7.0
EMC NetWorker=7.2
EMC NetWorker=7.3
EMC NetWorker=7.3.2
EMC NetWorker=7.4
EMC NetWorker=7.4-sp1
EMC NetWorker=7.4-sp2
EMC NetWorker=7.4-sp3
EMC NetWorker=7.4-sp4
EMC NetWorker=7.4-sp5
EMC NetWorker=7.4.5.4
EMC NetWorker=7.4.5.5
EMC NetWorker=7.4.5.6
EMC NetWorker=7.4.5.10
EMC NetWorker=7.5
EMC NetWorker=7.5-sp1
EMC NetWorker=7.5-sp2
EMC NetWorker=7.5-sp3
EMC NetWorker=7.5.2.0
EMC NetWorker=7.5.2.1
EMC NetWorker=7.5.2.2
EMC NetWorker=7.5.2.3
EMC NetWorker=7.5.2.4
EMC NetWorker=7.5.3
EMC NetWorker=7.5.3.1
EMC NetWorker=7.5.3.2
EMC NetWorker=7.5.3.3
EMC NetWorker=7.5.3.4
EMC NetWorker=7.5.3.5
EMC NetWorker=7.5.4
EMC NetWorker=7.5.4.1
EMC NetWorker=7.5.4.2
EMC NetWorker=7.5.4.3
EMC NetWorker=7.5.4.4
EMC NetWorker=7.5.4.5
EMC NetWorker=7.5.4.6
EMC NetWorker=7.5.4.7
EMC NetWorker=7.6.0.2
EMC NetWorker=7.6.0.3
EMC NetWorker=7.6.0.4
EMC NetWorker=7.6.0.5
EMC NetWorker=7.6.0.6
EMC NetWorker=7.6.0.7
EMC NetWorker=7.6.0.8
EMC NetWorker=7.6.0.9
EMC NetWorker=7.6.1
EMC NetWorker=7.6.1.1
EMC NetWorker=7.6.1.2
EMC NetWorker=7.6.1.3
EMC NetWorker=7.6.1.4
EMC NetWorker=7.6.1.5
EMC NetWorker=7.6.3
EMC NetWorker=7.6.4
EMC NetWorker=7.6.4.1
EMC NetWorker=7.6.4.2
EMC NetWorker=7.6.4.3
EMC NetWorker=7.6.4.4
EMC NetWorker=7.6.4.5
EMC NetWorker=7.6.5
EMC NetWorker=8.0
EMC NetWorker=8.0.0.1
EMC NetWorker=8.0.0.2
EMC NetWorker=8.0.0.3
EMC NetWorker=8.0.0.4
EMC NetWorker=8.0.0.5
EMC NetWorker=8.0.0.6
EMC NetWorker=8.0.1.3
Event History
May 3, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0940?
CVE-2013-0940 has a medium severity rating due to the weak permissions set by the nsrpush process in EMC NetWorker.
2
How do I fix CVE-2013-0940?
To fix CVE-2013-0940, upgrade EMC NetWorker to version 7.6.5.3 or later, or 8.0.1.4 or later.
3
Which versions of EMC NetWorker are affected by CVE-2013-0940?
CVE-2013-0940 affects EMC NetWorker versions earlier than 7.6.5.3 and certain versions in the 8.x series prior to 8.0.1.4.
4
Can local users exploit CVE-2013-0940?
Yes, local users can exploit CVE-2013-0940 to gain additional privileges due to the weak file permissions.
5
What components are primarily involved in CVE-2013-0940?
The nsrpush process in the EMC NetWorker client is primarily involved in CVE-2013-0940's vulnerability.