CVEvulnerability
CVE-2012-2291
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Affected configurations
• emc avamar 4.0
• emc avamar 4.1
• emc avamar 5.0
• emc avamar 5.0.0-407
• emc avamar 5.0.4-26
• emc avamar 6.0
• emc avamar plugin 4.0
• emc avamar plugin 5.0
• emc avamar plugin 6.0
• emc avamar plugin 6.1
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html archives.neohapsis.com