PT-2002-1199 · Emc · Emc Networker

Published 2002-03-15 · Updated 2012-03-30 · CVE-2002-0113

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions prior to 7.0

Description The issue allows local users to read sensitive information and possibly gain privileges due to world-readable permissions on log files stored in the /nsr/logs/ directory.

Recommendations For versions prior to 7.0, consider changing the permissions of the log files in the /nsr/logs/ directory to restrict access and prevent unauthorized reading of sensitive information.

Fix

Related Identifiers

CVE-2002-0113

Affected Products

Emc Networker

References · 5

• http://online.securityfocus.com/archive/1/249420 · Vendor Advisory
• http://iss.net/security_center/static/7897.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0113 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0113 · Note
• http://securityfocus.com/bid/3840 · Note