EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
Software | From | Fixed in |
---|---|---|
sun / solstice_backup | 6.0 | 6.0.x |
sun / solstice_backup | 6.1 | 6.1.x |
emc / legato_networker | 4.2.2 | 4.2.2.x |
emc / legato_networker | 6.0 | 6.0.x |
emc / legato_networker | 6.1 | 6.1.x |
emc / legato_networker | 7.13 | 7.13.x |
emc / legato_networker | 7.2 | 7.2.x |
sun / storedge_enterprise_backup_software | 7.0 | 7.0.x |
sun / storedge_enterprise_backup_software | 7.1 | 7.1.x |
sun / storedge_enterprise_backup_software | 7.2 | 7.2.x |