Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2013-0945

Disclosure Date: May 03, 2013 (last updated October 05, 2023)
EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
0
0
Attacker Value
Unknown

CVE-2013-0944

Disclosure Date: May 03, 2013 (last updated October 05, 2023)
The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.
0
0
Attacker Value
Unknown

CVE-2012-2291

Disclosure Date: January 21, 2013 (last updated October 05, 2023)
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
0
0
Attacker Value
Unknown

CVE-2011-1740

Disclosure Date: September 19, 2011 (last updated October 04, 2023)
EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.
0
0