CVE-2016-0904

The CVE-2016-0904 entry covers EMC Avamar Server components: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE). The root cause is that ADS/AVE installations use the same encryption key across different customers, enabling a remote attacker to defeat cryptographic protections and glean sens...

CVE-2016-0904

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by...

CVE-2016-2208

CVE-2016-2208 affects Symantec Antivirus Engine (AVE) kernel component in AVE 20151.1 before 20151.1.1.4. The issue arises when parsing malformed PE header files, enabling remote attackers to execute arbitrary code or cause a memory access violation and system crash. Several advisories and assess...

ESA-2014-094: EMC Avamar Weak Password Storage Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-094: EMC Avamar Weak Password Storage Vulnerability EMC Identifier: ESA-2014-094 CVE Identifier: CVE-2014-4623 Severity Rating: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected products: ? EMC Avamar Data Store ADS GEN4S and Avamar Virtual Edition AVE...

CVE-2014-4624

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...