PT-2005-1434 · Sun Microsystems+1 · Storedge Enterprise Backup+2

Published 2005-08-20 · Updated 2017-07-11 · CVE-2005-0358

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC Legato NetWorker versions 6.0 and 6.1 Solstice Backup versions 6.0 and 6.1 StorEdge Enterprise Backup versions 6.0 through 7.2

Description The issue allows remote attackers to gain privileges by modifying an authentication token due to improper verification of authentication tokens.

Recommendations For EMC Legato NetWorker versions 6.0 and 6.1, update to a version that properly verifies authentication tokens. For Solstice Backup versions 6.0 and 6.1, update to a version that properly verifies authentication tokens. For StorEdge Enterprise Backup versions 6.0 through 7.2, update to a version that properly verifies authentication tokens. As a temporary workaround, consider restricting access to authentication token modification until a patch is available.

Fix

Related Identifiers

CVE-2005-0358

Affected Products

Emc Legato Networker

Solstice Backup

Storedge Enterprise Backup

References · 10

• http://kb.cert.org/vuls/id/407641 · Patch
• http://securityfocus.com/bid/14582 · Vendor Advisory
• http://secunia.com/advisories/16464 · Vendor Advisory
• http://secunia.com/advisories/16470 · Vendor Advisory
• http://securitytracker.com/id?1014713 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-0358 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21892 · Note
• http://legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm · Note
• http://osvdb.org/18801 · Note