CVE-2002-0113 EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly g...
MediumCVSS 4.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 6.1 | No fix listed |
References
- 20020110 Legato Vulnerable mailing-list vendor-advisory
- legato-nsrd-log-permissions(7897) vdb-entry vendor-advisory
- 3840 vdb-entry