Sun Solstice Backup vulnerabilities

4 CVEs affecting Sun Solstice Backup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0359, published 2005-08-23.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0358, published 2005-08-23. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by…
• CVE-2005-0357, published 2005-08-23. High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days. EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote…
• CVE-2005-0359, published 2005-08-23. Medium severity, CVSS 6.4. EPSS: 4.3% chance of exploitation in the next 30 days. The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which…
• CVE-2000-0069, published 2000-01-01. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. The recover program in Solstice Backup allows local users to restore sensitive files.