Description
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
References
- 16470 third-party-advisory
- 16464 third-party-advisory
- 18800 vdb-entry
- 1014713 vdb-entry
- 14582 vdb-entry
- http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm
- 101886 vendor-advisory
- legato-authunix-bypass-authentication(21887) vdb-entry
- VU#606857 third-party-advisory