|
Legato NetWorker Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA16464
|
|
|
Release Date:
|
2005-08-17
|
|
Last Update:
|
2005-08-19
|
|
Popularity:
|
11,703 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
Exposure of system information
Exposure of sensitive information
DoS
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | EMC NetWorker (formerly Legato NetWorker) 7.x
Legato NetWorker 6.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
NOAA NCIRT Lab has reported three vulnerabilities in Legato NetWorker, which can be exploited by malicious people to cause a DoS (Denial of Service), gain knowledge of sensitive information, or bypass certain security restrictions.
1) An error in the AUTH_UNIX authentication for the RPC service can be exploited to bypass the authentication to the nwadmin, nsradmin, and nsrports components by providing a fake user name or to the recover and nsrececd components by providing a fake UID.
2) An error in the token-based authentication to the database services can be exploited to gain administrative privileges without being listed in the administrator list by sending a specially crafted token.
3) The portmapper (lgtomapper) allows calls to pmap_set and pmap_unset, which can be exploited to register and unregister RPC services thereby causing a DoS or potentially eavesdrop on NetWorker process communication.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
