← Vulnerability feed

Vulnerability record · CVE-2005-0357 · published 23 August 2005

CVE-2005-0357: Emc legato networker vulnerability

Emc · Legato Networker

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

7.5 CVSS 2.0 High EPSS 4.5% · top 8.8%
7.5CVSS 2.0 base score
4.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/16464 PatchVendor Advisory
http://secunia.com/advisories/16470 Vendor Advisory
http://securitytracker.com/id?1014713 Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 PatchVendor Advisory
http://www.kb.cert.org/vuls/id/606857 PatchThird Party AdvisoryUS Government Resource
http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm Patch
http://www.osvdb.org/18800
http://www.securityfocus.com/bid/14582 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/21887
http://secunia.com/advisories/16464 PatchVendor Advisory
http://secunia.com/advisories/16470 Vendor Advisory
http://securitytracker.com/id?1014713 Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 PatchVendor Advisory
http://www.kb.cert.org/vuls/id/606857 PatchThird Party AdvisoryUS Government Resource
http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htm Patch
http://www.osvdb.org/18800
http://www.securityfocus.com/bid/14582 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/21887

Track CVE-2005-0357 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-2754Ibm informix dynamic server vulnerabilityInteger signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe)…EPSS 40%9.3CVE-2007-3618Emc legato networker vulnerabilityStack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute ar…EPSS 7.1%7.5CVE-2005-3658Emc legato networker memory buffer overflow vulnerabilityMultiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Sols…EPSS 5.2%7.5CVE-2005-0358Emc legato networker vulnerabilityEMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which…EPSS 4.6%6.4CVE-2005-0359Emc legato networker vulnerabilityThe Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict acce…EPSS 4.3%5.0CVE-2005-3659Emc legato networker vulnerabilitynsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.…EPSS 2.5%2.1CVE-2000-0069Sun solstice backup vulnerabilityThe recover program in Solstice Backup allows local users to restore sensitive files.EPSS 0.39%

Source: NIST National Vulnerability Database (record CVE-2005-0357), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.