CVE-2016-0904

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by...

CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...

Command injection

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command...

CVE-2016-0921

EMC Avamar Server components Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) are affected by a local privilege escalation due to weak permissions on unspecified directories. The underlying issue is weak directory permissions that allow a local user to replace a script with a Trojan horse...

CVE-2016-0905

CVE-2016-0905 affects EMC Avamar Server components Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) prior to version 7.3.0-233. The issue allows a local attacker with admin access to obtain root privileges by entering a sudo command; remediation is to upgrade to 7.3.0-233 or later. The co...

CVE-2016-0905

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command...

CVE-2016-0920

EMC Avamar Server (including Avamar Data Store ADS and Avamar Virtual Edition AVE) is affected by CVE-2016-0920 in versions before 7.3.0-233. A local attacker can obtain root privileges by passing a crafted parameter to a command that is present in the sudo configuration. The issue is locally exp...

EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

EMC Avamar Data Store and Avamar Virtual Edition Command Injection Vulnerability

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability (CNVD-2016-07938)

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

Design/Logic Flaw

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906

The CVE-2016-0906 entry describes a vulnerability in EMC Avamar’s web-restore interface present in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) up to versions 7.2.1. An authenticated remote user can read or delete directories via Linux backup-restore operations, indicating improper ac...

EMC Secure Remote Services Virtual Edition Directory Traversal Vulnerability

EMC Secure Remote Services Virtual Edition ESRS VE is a suite of remote services virtual edition software from EMC Corporation. The software is used to provide a remote connection between EMC customer service and the user's EMC products and solutions. A directory traversal vulnerability exists in...

EMC Secure Remote Services Virtual Edition multiple security vulnerabilities

Code execution, SQL injection, buffer overflow...

EMC Avamar Virtual Edition and EMC Avamar Server Directory Traversal Vulnerability

EMC Avamar Virtual Edition is a fully virtualized backup and recovery solution of which EMC Avamar Server is the server-side software. A directory traversal vulnerability exists in EMC Avamar Virtual Edition and EMC Avamar Server, which allows remote attackers to exploit the vulnerability by...

CVE-2015-0543

EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

EMC Secure Remote Services Virtual Edition Unauthorized Access Vulnerability

EMC Secure Remote Services Virtual Edition is the virtual edition of the Remote Services software that provides two-way remote connectivity between EMC customer service and end-user EMC products and solutions. EMC Secure Remote Services Virtual Edition system to create a session COOKIE is not...

EMC Secure Remote Services Virtual Edition Certificate Forgery Vulnerability

EMC Secure Remote Services Virtual Edition is the virtual edition of the Remote Services software that provides two-way remote connectivity between EMC customer service and end-user EMC products and solutions. EMC Secure Remote Services Virtual Edition fails to properly validate certificates,...