CVE-2011-1420
Status: ModifiedHigh (7.2)—
EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
CVSS
- Version: 2.0
- Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
- Base score: 7.2
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.38%
- Percentile among all scored CVEs: 29
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- CWE-264
References
- http://secunia.com/advisories/43893
- http://securityreason.com/securityalert/8169
- http://securitytracker.com/id?1025253
- http://www.securityfocus.com/archive/1/517179/100/0/threaded
- http://www.securityfocus.com/bid/47036
- http://www.vupen.com/english/advisories/2011/0783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66323
- http://secunia.com/advisories/43893
- http://securityreason.com/securityalert/8169
- http://securitytracker.com/id?1025253
- http://www.securityfocus.com/archive/1/517179/100/0/threaded
- http://www.securityfocus.com/bid/47036
- http://www.vupen.com/english/advisories/2011/0783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66323
Raw JSON (NVD)
Show
{
"id": "CVE-2011-1420",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "security_alert@emc.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-03-28T16:55:04.810",
"references": [
{
"url": "http://secunia.com/advisories/43893",
"source": "security_alert@emc.com"
},
{
"url": "http://securityreason.com/securityalert/8169",
"source": "security_alert@emc.com"
},
{
"url": "http://securitytracker.com/id?1025253",
"source": "security_alert@emc.com"
},
{
"url": "http://www.securityfocus.com/archive/1/517179/100/0/threaded",
"source": "security_alert@emc.com"
},
{
"url": "http://www.securityfocus.com/bid/47036",
"source": "security_alert@emc.com"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0783",
"source": "security_alert@emc.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66323",
"source": "security_alert@emc.com"
},
{
"url": "http://secunia.com/advisories/43893",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityreason.com/securityalert/8169",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1025253",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/517179/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/47036",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0783",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66323",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors."
},
{
"lang": "es",
"value": "EMC Data Protection Advisor Collector v5.7 y v5.7.1 en plataformas Solaris SPARC utiliza permisos débiles para archivos no específicos,lo que permite a usuarios locales conseguir privilegios a través de vectores desconocidos."
}
],
"lastModified": "2026-06-16T23:29:18.820",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:data_protection_advisor_collector:5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7D64DF5-7B9E-4E98-B3E7-4C95D41AEE17"
},
{
"criteria": "cpe:2.3:a:emc:data_protection_advisor_collector:5.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12BF8AAB-BFF1-405A-B7BF-38CAFE44CBF5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:oracle:solaris_sparc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4631B2DD-D14D-4A02-9DE0-F724C18644C7"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security_alert@emc.com"
}