CVE-2011-1420

2011-03-2816:55:04

CWE-264

[email protected]

web.nvd.nist.gov

emc

data protection advisor

collector

solaris

sparc

permissions

vulnerability

cve-2011-1420

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.7%

JSON

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

Affected configurations

NVD

Node

emcdata_protection_advisor_collectorMatch5.7

emcdata_protection_advisor_collectorMatch5.7.1

AND

oraclesolaris_sparc

CPENameOperatorVersion
emc:data_protection_advisor_collectoremc data protection advisor collectoreq5.7
emc:data_protection_advisor_collectoremc data protection advisor collectoreq5.7.1
oracle:solaris_sparcoracle solaris sparceq*

CPE	Name	Operator	Version
emc:data_protection_advisor_collector	emc data protection advisor collector	eq	5.7
emc:data_protection_advisor_collector	emc data protection advisor collector	eq	5.7.1
oracle:solaris_sparc	oracle solaris sparc	eq	*