EMC Software Information for VU#498553

Description of Problem:

The Management Console component of NetWorker uses an embedded database that
runs in a separate process on the Management Console server.  Access to this
database process is restricted to authorized users, but a vulnerability has
been discovered that may allow unauthorized users to access the database
content.

Problem Resolution:

Users may apply NetWorker 7.3.2 Jumbo Update 1. This patch restricts how the
database can be accessed.

To access NetWorker 7.3.2 Jumbo Update 1, go to:

ftp://ftp.legato.com/pub/NetWorker/Updates/732JumboUpdate1

Then download the appropriate version for your environment.

A readme file is included in the ftp location.

Please read and utilize the information in this product alert to assist in
avoiding any situation that might arise from the problem(s) described herein.
If you have any questions regarding this product alert, please contact EMC
Software Technical Support at 1-877-534-2867.

Credit:

The National Oceanic and Atmospheric Administration (NOAA) Computer Incident
Response Team (N-CIRT) is credited with the discovery of this vulnerability.

Vendor Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.