CVE-2011-1421 EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unk...
MediumCVSS 6.9
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 7.5.2.0 | No fix listed |
| emc networker | = 7.5.2.1 | No fix listed |
| emc networker | = 7.5.2.2 | No fix listed |
| emc networker | = 7.5.2.3 | No fix listed |
| emc networker | = 7.5.2.4 | No fix listed |
| emc networker | = 7.5.3 | No fix listed |
| emc networker | = 7.5.3.1 | No fix listed |
| emc networker | = 7.5.3.2 | No fix listed |
| emc networker | = 7.5.3.3 | No fix listed |
| emc networker | = 7.5.3.4 | No fix listed |
| emc networker | = 7.5.3.5 | No fix listed |
| emc networker | = 7.5.4 | No fix listed |
| emc networker | = 7.5.4.1 | No fix listed |
| emc networker | = 7.5.4.2 | No fix listed |
| emc networker | = 7.6 | No fix listed |
| emc networker | = 7.6-sp1 | No fix listed |
| emc networker | = 7.6.0.2 | No fix listed |
| emc networker | = 7.6.0.3 | No fix listed |
| emc networker | = 7.6.0.4 | No fix listed |
| emc networker | = 7.6.0.5 | No fix listed |
| emc networker | = 7.6.0.6 | No fix listed |
| emc networker | = 7.6.0.7 | No fix listed |
| emc networker | = 7.6.0.8 | No fix listed |
| emc networker | = 7.6.0.9 | No fix listed |
| emc networker | = 7.6.1 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 7.6.1.1 | No fix listed |
| emc networker | = 7.6.1.2 | No fix listed |
| emc networker | = 7.6.1.3 | No fix listed |
| emc networker | = 7.6.1.4 | No fix listed |
References
- 44237 third-party-advisory vendor-advisory
- 8214 third-party-advisory
- 1025383 vdb-entry
- 20110418 ESA-2011-013: EMC NetWorker arbitrary code execution with elevated privileges vulnerability mailing-list
- 47410 vdb-entry
- ADV-2011-1025 vdb-entry vendor-advisory