EMC Software Information for VU#498553
EMC NetWorker Management Console weak authentication vulnerability
- Vendor Information Help Date Notified: 17 Nov 2006
- Statement Date:
- Date Updated: 27 Feb 2007
Description of Problem:
The Management Console component of NetWorker uses an embedded database that
runs in a separate process on the Management Console server. Access to this
database process is restricted to authorized users, but a vulnerability has
been discovered that may allow unauthorized users to access the database
Users may apply NetWorker 7.3.2 Jumbo Update 1. This patch restricts how the
database can be accessed.
To access NetWorker 7.3.2 Jumbo Update 1, go to:
Then download the appropriate version for your environment.
A readme file is included in the ftp location.
Please read and utilize the information in this product alert to assist in
avoiding any situation that might arise from the problem(s) described herein.
If you have any questions regarding this product alert, please contact EMC
Software Technical Support at 1-877-534-2867.
The National Oceanic and Atmospheric Administration (NOAA) Computer Incident
Response Team (N-CIRT) is credited with the discovery of this vulnerability.
The vendor has not provided us with any further information regarding this vulnerability.
There are no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.