CVE-2002-0114 in NetWorker

Summary

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 03/25/2002
• Moderation: VulDB entry created
• Entries: VDB-18011 (1)
• CPE: ready
• CWE: CWE-312 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00066
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0114
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0114
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0114/