What’s Vulnerable › Vulnerabilities

CVE-2006-3892

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-03-02 · updated 2026-06-16

Description

The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands.

Affected products

• EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4: 7.3.2

References

• http://osvdb.org/33853
• http://secunia.com/advisories/24362
• http://www.kb.cert.org/vuls/id/498553
• http://www.kb.cert.org/vuls/id/MIMG-6VMLWA
• http://www.securityfocus.com/bid/22789
• http://www.securitytracker.com/id?1017724
• http://www.vupen.com/english/advisories/2007/0816
• http://osvdb.org/33853
• http://secunia.com/advisories/24362
• http://www.kb.cert.org/vuls/id/498553

Get alerted when CVE-2006-3892 or the next vulnerability affects your stack