CVE-2012-2291 EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to ga...
HighCVSS 7.2
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc avamar | = 4.0 | No fix listed |
| emc avamar | = 4.1 | No fix listed |
| emc avamar | = 5.0 | No fix listed |
| emc avamar | = 5.0-sp1 | No fix listed |
| emc avamar | = 5.0-sp2 | No fix listed |
| emc avamar | = 5.0.0-407 | No fix listed |
| emc avamar | = 5.0.4-26 | No fix listed |
| emc avamar | = 6.0 | No fix listed |
| emc avamar plugin | = 4.0 | No fix listed |
| emc avamar plugin | = 5.0 | No fix listed |
| emc avamar plugin | = 6.0 | No fix listed |
| emc avamar plugin | = 6.1 | No fix listed |
References
- 20130121 Re: EMC Avamar: World writable cache files mailing-list