Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC Legato Networker 敏感信息泄露漏洞
Vulnerability Description
EMC Legato NetWorker、 Sun Solstice Backup 6.0和6.1以及 StorEdge Enterprise Backup 7.0 至7.2中的Legato PortMapper不能限制对pmap_set和pmap_unset命令的访问。这使得远程攻击者可以(1)通过使用pmap_unset命令取消注册NetWorker服务以造成拒绝服务，或(2)通过使用pmap_set命令注册新服务以获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A