CVE-2014-4623

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2014-10/0146.html
• packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html
• securityfocus.com/bid/70732
• securitytracker.com/id/1031117
• exchange.xforce.ibmcloud.com/vulnerabilities/97757

avamar のその他の脆弱性

• CVE-2016-0906高 8.8The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 al…
• CVE-2013-0945緊急 9.3EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj…
• CVE-2013-0944低 3.5The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a craft…
• CVE-2012-2291高 7.2EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permi…
• CVE-2012-4610低 3.3EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain…