| Package | Affected versions | Patched versions |
|---|---|---|
| avamar | = 4.0= 4.1= 5.0= 5.0.0-407= 5.0.4-26= 6.0 | |
| avamar plugin | = 4.0= 5.0= 6.0= 6.1 |
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free