EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

Sun StorEdge EBS 7.1_x86: Product Patch.
Date this patch was last updated by Sun : Aug/16/05

Sun StorEdge EBS 7.1L: Product Patch.
Date this patch was last updated by Sun : Aug/16/05

Sun StorEdge EBS 7.1: Product Patch.
Date this patch was last updated by Sun : Aug/16/05

The remote host is running one of the following products :

 - Legato Networker
 - Sun StorEdge Enterprise Backup Software
 - Sun Solstice Backup Software
 - Informix Storage Manager

The installed version of this software is vulnerable to denial of service, unauthorized access and remote command execution attacks.

ID	Name	Product	Family	Severity
38067	Solaris 7 (x86) : 119671-01	Nessus	Solaris Local Security Checks	high
37992	Solaris 7 (sparc) : 120649-01	Nessus	Solaris Local Security Checks	high
37733	Solaris 8 (sparc) : 120649-01	Nessus	Solaris Local Security Checks	high
37670	Solaris 8 (x86) : 119671-01	Nessus	Solaris Local Security Checks	high
36841	Solaris 9 (x86) : 119671-01	Nessus	Solaris Local Security Checks	high
36504	Solaris 9 (sparc) : 120649-01	Nessus	Solaris Local Security Checks	high
23555	Solaris 9 (sparc) : 119670-01	Nessus	Solaris Local Security Checks	high
23417	Solaris 8 (sparc) : 119670-01	Nessus	Solaris Local Security Checks	high
23265	Solaris 7 (sparc) : 119670-01	Nessus	Solaris Local Security Checks	high
19558	EMC Legato Networker Multiple Vulnerabilities	Nessus	Misc.	critical

Detections

Analytics

CVE-2005-0357

critical

Tenable Plugins

high

high

high

high

high

high

high

high

high

critical