Emc Legato Networker vulnerabilities

7 CVEs affecting Emc Legato Networker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2754, published 2010-03-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-2754, published 2010-03-05. High severity, CVSS 10.0. EPSS: 40.1% chance of exploitation in the next 30 days. Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS)…
CVE-2007-3618, published 2007-08-21. High severity, CVSS 9.3. EPSS: 7.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or (2) kill request…
CVE-2005-3658, published 2005-12-31. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge…
CVE-2005-0358, published 2005-08-23. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by…
CVE-2005-0357, published 2005-08-23. High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days. EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote…
CVE-2005-0359, published 2005-08-23. Medium severity, CVSS 6.4. EPSS: 4.3% chance of exploitation in the next 30 days. The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which…
CVE-2005-3659, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS)…