CVE-2012-2291
Published Jan 21, 2013
Last updated 12 years ago
Overview
- Description
- EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
- Source
- security_alert@emc.com
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:avamar:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "012C16C2-8904-4584-8B22-2D311388A7CF"
},
{
"criteria": "cpe:2.3:a:emc:avamar:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F0D5A62-9AF8-4E4B-A208-7772386794A9"
},
{
"criteria": "cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56741A4C-2A47-47D5-BA57-73CF24F41267"
},
{
"criteria": "cpe:2.3:a:emc:avamar:5.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "866AFF0F-F25C-4B11-AAD3-5AE12257CAEF"
},
{
"criteria": "cpe:2.3:a:emc:avamar:5.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13D2AF12-9343-4961-9FDE-BEAD12E528B8"
},
{
"criteria": "cpe:2.3:a:emc:avamar:5.0.0-407:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A853F02F-67BA-42E6-8D31-78EEA579A7E7"
},
{
"criteria": "cpe:2.3:a:emc:avamar:5.0.4-26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8F939D7-8E59-426A-8B80-30E6BA7384F4"
},
{
"criteria": "cpe:2.3:a:emc:avamar:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3ED3F62-A7F2-4E23-9000-1E0FCBC6B5B5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "61A4F116-1FEE-450E-99AE-6AD9ACDDE570"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:avamar_plugin:4.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BC4F1CA-C242-45F5-898F-654B3CAD2371"
},
{
"criteria": "cpe:2.3:a:emc:avamar_plugin:5.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE4EEB30-C72F-47E0-994D-8902E7A8ED92"
},
{
"criteria": "cpe:2.3:a:emc:avamar_plugin:6.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C9AF37A-2770-475D-AED0-B6DB71FA1C45"
},
{
"criteria": "cpe:2.3:a:emc:avamar_plugin:6.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8303546F-32A4-4245-B806-275F817A5EAA"
}
],
"operator": "OR"
}
]
}
]