Multiple vulnerabilities in Dell NetWorker



Published: 2022-09-23
Risk Medium
Patch available YES
Number of vulnerabilities 6
CVE-ID CVE-2020-25695
CVE-2019-10208
CVE-2019-10164
CVE-2020-25696
CVE-2020-14350
CVE-2020-14349
CWE-ID CWE-89
CWE-264
CWE-121
CWE-20
CWE-426
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
EMC NetWorker Server
Server applications / Other server solutions

Vendor Dell

Security Bulletin

This security bulletin contains information about 6 vulnerabilities.

1) SQL injection

EUVDB-ID: #VU48436

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-25695

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote authenticated attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Mitigation

Install update from vendor's website.

Vulnerable software versions

EMC NetWorker Server: before 19.6.1.3

before 19.6.1.3, 19.7.0.1
CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000202875/dsa-2022-232-dell-emc-networker-security-update-for-multiple-vulnerabilities

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU20003

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2019-10208

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to way PostreSQL processes SECURITY DEFINER functions. A privileged attacker with EXECUTE permission, which must itself contain a function call having inexact argument type match, can execute arbitrary SQL query under the identity of the function owner.

Mitigation

Install update from vendor's website.

Vulnerable software versions

EMC NetWorker Server: before 19.6.1.3

before 19.6.1.3, 19.7.0.1
CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000202875/dsa-2022-232-dell-emc-networker-security-update-for-multiple-vulnerabilities

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Stack-based buffer overflow

EUVDB-ID: #VU18861

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2019-10164

CWE-ID: CWE-121 - Stack-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing users passwords. A remote authenticated user can change his/her password to a specially crafted string, trigger stack-based buffer overflow and execute arbitrary code on the target system or crash the PostgreSQL process.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

EMC NetWorker Server: before 19.6.1.3

before 19.6.1.3, 19.7.0.1
CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000202875/dsa-2022-232-dell-emc-networker-security-update-for-multiple-vulnerabilities

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Input validation error

EUVDB-ID: #VU48438

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-25696

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the "\gset" meta-command does not distinguish variables that control psql behavior. A remote attacker can execute arbitrary code as the operating system account.

Mitigation

Install update from vendor's website.

Vulnerable software versions

EMC NetWorker Server: before 19.6.1.3

before 19.6.1.3, 19.7.0.1
CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000202875/dsa-2022-232-dell-emc-networker-security-update-for-multiple-vulnerabilities

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

5) Untrusted search path

EUVDB-ID: #VU45749

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-14350

CWE-ID: CWE-426 - Untrusted Search Path

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges within the database.

The vulnerability exists due to the way PostgreSQL handles CREATE EXTENSION statements. A remote user with permission to create objects in the new extension's schema or a schema of a prerequisite extension can execute arbitrary SQL functions under the identity of the superuser in certain cases.

Mitigation

Install update from vendor's website.

Vulnerable software versions

EMC NetWorker Server: before 19.6.1.3

before 19.6.1.3, 19.7.0.1
CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000202875/dsa-2022-232-dell-emc-networker-security-update-for-multiple-vulnerabilities

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

6) Untrusted search path

EUVDB-ID: #VU45748

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-14349

CWE-ID: CWE-426 - Untrusted Search Path

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges within the database.

The vulnerability exists due to the way PostgreSQL handles search_path during replications. Users of a replication publisher or subscriber database can create objects in the public schema and harness them to execute arbitrary SQL functions under the identity running replication, often a superuser.

Mitigation

Install update from vendor's website.

Vulnerable software versions

EMC NetWorker Server: before 19.6.1.3

before 19.6.1.3, 19.7.0.1
CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000202875/dsa-2022-232-dell-emc-networker-security-update-for-multiple-vulnerabilities

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###