Code injection

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain...

CVE-2011-1740

EMC Avamar 4.x, 5.0.x and 6.0.x prior to 6.0.0-592 are affected by a privilege enforcement bypass that may allow remote authenticated users to modify client data or view sensitive activity by leveraging access across domains. The issue is described in EMC advisory ESA-2011-018 and related CVE-201...

CVE-2011-1740

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain...

CVE-2011-1740: Undefined Security Weakness

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain...

ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar. EMC Identifier: ESA-2011-018 CVE Identifier: CVE-2011-1740 Severity Rating: CVSS v2 Base Score: 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC Avamar version 4.x EM...

EMC Avamar privilege escalation

Domain administrator can access data from different domain...

ESA-2011-007: EMC Avamar sensitive information disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-007: EMC Avamar sensitive information disclosure vulnerability. EMC Identifier: ESA-2011-007 CVE Identifier: CVE-2011-0442 Severity Rating: CVSS v2 Base Score: 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C Affected products: EMC Avamar 5.0.0-407 and later b...

EMC Avamar secrurity vulnerabilities

Information leakage, privilege escalation...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0648

Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors...

Code injection

Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors...

Code injection

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0648

CVE-2011-0648 affects EMC Avamar prior to version 5.0.4-30, where remote authenticated users can gain privileges via unknown vectors. The vulnerability is classified with a high impact (CVSSv2 base score 8.5) and involves complete impact on confidentiality, integrity, and availability. Affected c...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0442

EMC Avamar 5.x before 5.0.4 transmits event details in cleartext over service requests and internal emails, potentially exposing sensitive customer information to network sniffing. Affected versions include EMC Avamar 5.0.0-407 and later but prior to 5.0.4 (5.0 SP4). Resolution guidance from EMC ...

CVE-2011-0648

Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-0442: Undefined Security Weakness

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

PT-2011-2345

Name of the Vulnerable Software and Affected Versions EMC Avamar versions 5.0.0 through 5.0.3 Description The service utility in EMC Avamar uses cleartext to transmit event details in service requests and e-mail messages, which might allow remote attackers to obtain sensitive information by...

CVE-2011-0648: Undefined Security Weakness

Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors...

ESA-2010-007: EMC Avamar Denial Of Service Vulnerability

ESA-2010-007: EMC Avamar Denial Of Service Vulnerability Identifier: ESA-2010-007 CVE Identifier: CVE-2010-1919 Severity Rating: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C Affected products: EMC Avamar version 4.1.x EMC Avamar version 5.0 Please note EMC Avamar 5.0 SP1 is not affected by...