CVE-2016-0921

EMC Avamar Server components Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) are affected by a local privilege escalation due to weak permissions on unspecified directories. The underlying issue is weak directory permissions that allow a local user to replace a script with a Trojan horse...

CVE-2016-0903

EMC Avamar Server (ADS/AVE) before 7.3.0-233 uses client-side authentication, allowing remote attackers to spoof clients and read backup data via a modified agent. Affected: Avamar Data Store and Avamar Virtual Edition. Impact: read-backup data. Remediation: upgrade to 7.3.0-233 or later as docum...

CVE-2016-0920

EMC Avamar Server (including Avamar Data Store ADS and Avamar Virtual Edition AVE) is affected by CVE-2016-0920 in versions before 7.3.0-233. A local attacker can obtain root privileges by passing a crafted parameter to a command that is present in the sudo configuration. The issue is locally exp...

CVE-2016-0904

The CVE-2016-0904 entry covers EMC Avamar Server components: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE). The root cause is that ADS/AVE installations use the same encryption key across different customers, enabling a remote attacker to defeat cryptographic protections and glean sens...

CVE-2016-0905

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command...

CVE-2016-0905

CVE-2016-0905 affects EMC Avamar Server components Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) prior to version 7.3.0-233. The issue allows a local attacker with admin access to obtain root privileges by entering a sudo command; remediation is to upgrade to 7.3.0-233 or later. The co...

EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

EMC Avamar Data Store and Avamar Virtual Edition Command Injection Vulnerability

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability (CNVD-2016-07938)

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

Design/Logic Flaw

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906

The CVE-2016-0906 entry describes a vulnerability in EMC Avamar’s web-restore interface present in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) up to versions 7.2.1. An authenticated remote user can read or delete directories via Linux backup-restore operations, indicating improper ac...

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

ALPINE-CVE-2016-3418

Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682,...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Berkeley DB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the integrity, accessibility, and confidentiality of the information...

The vulnerability of the Berkeley DB database management system allows a hacker to compromise the integrity and accessibility of the data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the integrity and accessibility of the data...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of data...