CVE - CVE-2005-0357

CVE-ID
CVE-2005-0357	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:14582 URL:http://www.securityfocus.com/bid/14582 CERT-VN:VU#606857 URL:http://www.kb.cert.org/vuls/id/606857 CONFIRM:http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm OSVDB:18800 URL:~~http://www.osvdb.org/18800~~ (Obsolete source) SECTRACK:1014713 URL:http://securitytracker.com/id?1014713 SECUNIA:16464 URL:http://secunia.com/advisories/16464 SECUNIA:16470 URL:http://secunia.com/advisories/16470 SUNALERT:101886 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1~~ (Obsolete source) XF:legato-authunix-bypass-authentication(21887) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/21887
Assigning CNA
CERT/CC
Date Record Created
20050211	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050211)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)