Notified:  November 17, 2006 Updated: February 27, 2007

Status

Affected

Vendor Statement

Description of Problem: The Management Console component of NetWorker uses an embedded database that runs in a separate process on the Management Console server. Access to this database process is restricted to authorized users, but a vulnerability has been discovered that may allow unauthorized users to access the database content. Problem Resolution: Users may apply NetWorker 7.3.2 Jumbo Update 1. This patch restricts how the database can be accessed. To access NetWorker 7.3.2 Jumbo Update 1, go to: ftp://ftp.legato.com/pub/NetWorker/Updates/732JumboUpdate1 Then download the appropriate version for your environment. A readme file is included in the ftp location. Please read and utilize the information in this product alert to assist in avoiding any situation that might arise from the problem(s) described herein. If you have any questions regarding this product alert, please contact EMC Software Technical Support at 1-877-534-2867. Credit: The National Oceanic and Atmospheric Administration (NOAA) Computer Incident Response Team (N-CIRT) is credited with the discovery of this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.