Vulnerability CVE-2011-1421
Published: 2011-04-22   Modified: 2012-02-13

Description:
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
EMC NetWorker arbitrary code execution with elevated privileges vulnerability
emc
25.04.2011

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:L/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.9/10
10/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
EMC -> Networker 

 References:
http://securityreason.com/securityalert/8214
http://securitytracker.com/id?1025383
http://www.securityfocus.com/archive/1/517532/100/0/threaded
http://www.securityfocus.com/bid/47410
http://www.vupen.com/english/advisories/2011/1025
Copyright 2024, cxsecurity.com

 

Back to Top