| Package | Affected versions | Patched versions |
|---|---|---|
| legato networker | = 4.2.2= 6.0= 6.1= 7.13= 7.2 | |
| solstice backup | = 6.0= 6.1 | |
| storedge enterprise backup software | = 7.0= 7.1= 7.2 |
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free