emc avamar 5.0.4-26 vulnerabilities and exploits

(subscribe to this query)

7.7

CVSSv2

EMC Avamar 4.x, 5.0.x, and 6.0.x prior to 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.

Emc Avamar 5.0.4-26 Emc Avamar 6.0 Emc Avamar 4.1 Emc Avamar 5.0.0-407 Emc Avamar 5.0 Emc Avamar 4.0

9.3

CVSSv2

EMC Avamar Client prior to 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle malicious users to spoof SSL servers via an arbitrary valid...

Emc Avamar 5.0 Emc Avamar 5.0.4-26 Emc Avamar 5.0.0-407 Emc Avamar 6.0 Emc Avamar 4.0 Emc Avamar Emc Avamar 4.1

3.5

CVSSv2

The web-based file-restore interface in EMC Avamar Server prior to 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.

Emc Avamar 6.0.2 Emc Avamar 6.0.3 Emc Avamar 5.0 Emc Avamar 5.0.0-407 Emc Avamar 6.0.1 Emc Avamar 5.0.4-26 Emc Avamar 6.0

7.2

CVSSv2

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.

Emc Avamar 5.0 Emc Avamar 5.0.0-407 Emc Avamar 4.0 Emc Avamar 4.1 Emc Avamar 5.0.4-26 Emc Avamar 6.0 Emc Avamar Plugin 4.0 Emc Avamar Plugin 6.0 Emc Avamar Plugin 5.0 Emc Avamar Plugin 6.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook