Sun Storedge Enterprise Backup Software vulnerabilities

3 CVEs affecting Sun Storedge Enterprise Backup Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0359, published 2005-08-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0358, published 2005-08-23. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by…
CVE-2005-0357, published 2005-08-23. High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days. EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote…
CVE-2005-0359, published 2005-08-23. Medium severity, CVSS 6.4. EPSS: 4.3% chance of exploitation in the next 30 days. The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which…