Description
EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Metrics
CVSS 2.0 4.6/10
AV:L/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://online.securityfocus.com/archive/1/249420Vendor Advisory
- http://www.iss.net/security_center/static/7898.phpVendor Advisory
- http://www.securityfocus.com/bid/3842
- http://online.securityfocus.com/archive/1/249420Vendor Advisory
- http://www.iss.net/security_center/static/7898.phpVendor Advisory
- http://www.securityfocus.com/bid/3842
Timeline
- Published
- Mar 25, 2002
- Last modified
- Jun 16, 2026
- NVD status
- Modified