PT-2012-3923 · Emc+1 · Networker Module For Microsoft Applications+1

Publicado 2012-10-18 · Atualizado 2013-04-19 · CVE-2012-2284

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for Microsoft Applications (NMM) versions 2.2.1 through 2.3 before build 122 EMC NetWorker Module for Microsoft Applications (NMM) versions 2.4 before build 375

Description The issue affects the install and upgrade processes in EMC NetWorker Module for Microsoft Applications when used with Exchange Server, allowing local users to read cleartext administrator credentials.

Recommendations For versions 2.2.1 through 2.3 before build 122, update to build 122 or later to resolve the issue. For versions 2.4 before build 375, update to build 375 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-2284

Produtos afetados

Networker Module For Microsoft Applications

Exchange Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-2284 · Nota de Segurança
• http://secunia.com/advisories/50957 · Nota
• http://securityfocus.com/bid/55883 · Nota
• http://securitytracker.com/id?1027647 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html · Nota
• http://osvdb.org/86157 · Nota