CVE-2005-0357

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

• http://secunia.com/advisories/16464Patch, Vendor Advisory
• http://secunia.com/advisories/16470Vendor Advisory
• http://securitytracker.com/id?1014713Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/606857Patch, Third Party Advisory, US Government Resource
• http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htmPatch
• http://www.osvdb.org/18800
• http://www.securityfocus.com/bid/14582Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21887
• http://secunia.com/advisories/16464Patch, Vendor Advisory
• http://secunia.com/advisories/16470Vendor Advisory
• http://securitytracker.com/id?1014713Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/606857Patch, Third Party Advisory, US Government Resource
• http://www.legato.com/support/websupport/product_alerts/081605_NW_authentication.htmPatch
• http://www.osvdb.org/18800
• http://www.securityfocus.com/bid/14582Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21887

Published

Aug 23, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0349The production release of the UniversalAgent for UNIX in Bri…
• CVE-2005-0350Heap-based buffer overflow in multiple F-Secure Anti-Virus a…
• CVE-2005-0351Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh…
• CVE-2005-0352Servers Alive 4.1 and 5.0, when running as a service, does n…
• CVE-2005-0353Buffer overflow in the Sentinel LM (Lservnt) service in the …
• CVE-2005-0356Multiple TCP implementations with Protection Against Wrapped…
• CVE-2005-0358EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorE…
• CVE-2005-0359The Legato PortMapper in EMC Legato NetWorker, Sun Solstice …
• CVE-2005-0360The Microsoft Log Sink Class ActiveX control in pkmcore.dll …
• CVE-2005-0362awstats.pl in AWStats 6.2 allows remote attackers to execute…
• CVE-2005-0363awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to…
• CVE-2005-0364Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.1…