CVE-2005-0358

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-23 · updated 2026-06-16

Description

EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.

Affected products

EMC Legato Networker: 4.2.2, 6.0, 6.1, 7.2, 7.13
Sun Solstice Backup: 6.0, 6.1
Sun Storedge Enterprise Backup Software: 7.0, 7.1, 7.2

References

http://secunia.com/advisories/16464
http://secunia.com/advisories/16470
http://securitytracker.com/id?1014713
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1
http://www.kb.cert.org/vuls/id/407641
http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm
http://www.osvdb.org/18801
http://www.securityfocus.com/bid/14582
https://exchange.xforce.ibmcloud.com/vulnerabilities/21892
http://secunia.com/advisories/16464
http://secunia.com/advisories/16470
http://securitytracker.com/id?1014713

Get alerted when CVE-2005-0358 or the next vulnerability affects your stack