CVE-2002-0114 EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this...
MediumCVSS 4.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 6.1 | No fix listed |
References
- 20020110 Legato Vulnerable mailing-list vendor-advisory
- legato-nsrd-log-plaintext(7898) vdb-entry vendor-advisory
- 3842 vdb-entry