PT-2012-3923 · Emc+1 · Networker Module For Microsoft Applications+1

Published 2012-10-18 · Updated 2013-04-19 · CVE-2012-2284

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC NetWorker Module for Microsoft Applications (NMM) versions 2.2.1 through 2.3 before build 122 EMC NetWorker Module for Microsoft Applications (NMM) versions 2.4 before build 375

Description The issue affects the install and upgrade processes in EMC NetWorker Module for Microsoft Applications when used with Exchange Server, allowing local users to read cleartext administrator credentials.

Recommendations For versions 2.2.1 through 2.3 before build 122, update to build 122 or later to resolve the issue. For versions 2.4 before build 375, update to build 375 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-2284

Affected Products

Networker Module For Microsoft Applications

Exchange Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-2284 · Security Note
• http://secunia.com/advisories/50957 · Note
• http://securityfocus.com/bid/55883 · Note
• http://securitytracker.com/id?1027647 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html · Note
• http://osvdb.org/86157 · Note