PT-2011-3117 · Emc · Emc Networker

Publicado 2011-04-22 · Atualizado 2018-10-09 · CVE-2011-1421

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 7.5.x through 7.5.4.2 EMC NetWorker versions 7.6.x through 7.6.1.4

Description The issue allows local users to gain privileges via unknown vectors due to weak permissions for an unspecified file when the client push feature is enabled.

Recommendations For EMC NetWorker versions 7.5.x through 7.5.4.2, update to version 7.5.4.3 or later. For EMC NetWorker versions 7.6.x through 7.6.1.4, update to version 7.6.1.5 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-1421

Produtos afetados

Emc Networker

Referências · 8

• http://securityfocus.com/archive/1/517532/100/0/threaded · Nota
• http://securityreason.com/securityalert/8214 · Nota
• http://secunia.com/advisories/44237 · Aviso do Fabricante
• http://securityfocus.com/bid/47410 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1421 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1421 · Nota
• http://vupen.com/english/advisories/2011/1025 · Aviso do Fabricante
• http://securitytracker.com/id?1025383 · Nota