7.2
CVSSv2

CVE-2012-2291

Published: 21/01/2013 Updated: 22/01/2013
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.

Vulnerable Product Search on Vulmon Subscribe to Product

emc avamar 5.0

emc avamar 5.0.0-407

emc avamar 4.0

emc avamar 4.1

emc avamar 5.0.4-26

emc avamar 6.0

emc avamar plugin 4.0

emc avamar plugin 6.0

emc avamar plugin 5.0

emc avamar plugin 6.1