EMC Data Protection Advisor Collector for Solaris SPARC Insecure File Permissions Vulnerability

Bugtraq ID:	47036
Class:	Design Error
CVE:	CVE-2011-1420
Remote:	No
Local:	Yes
Published:	Mar 25 2011 12:00AM
Updated:	Mar 25 2011 12:00AM
Credit:	Stefan Wuensch
Vulnerable:	EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1 EMC Data Protection Advisor Collector for Solaris SPARC 5.7
Not Vulnerable:	EMC Data Protection Advisor Collector for Solaris SPARC 5.7.Build 5833 EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1.Build 5833

EMC Data Protection Advisor Collector for Solaris SPARC Insecure File Permissions Vulnerability

EMC Data Protection Advisor Collector for Solaris SPARC is prone to an insecure-file-permissions vulnerability.

Attackers can exploit this issue to execute arbitrary code with elevated privileges in the affected system.

EMC Data Protection Advisor Collector for Solaris SPARC Insecure File Permissions Vulnerability

An attacker can use standard tools to exploit this issue.

EMC Data Protection Advisor Collector for Solaris SPARC Insecure File Permissions Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for details.

EMC Data Protection Advisor Collector for Solaris SPARC Insecure File Permissions Vulnerability

References:

• EMC Homepage (EMC)
  
• SA-2011-010: EMC Data Protection Advisor Collector arbitrary code execution with (EMC)