CVE

Id
71920  
CVE No.
CVE-2014-4623  
Status
Candidate  
Description
EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.  
Phase
Assigned (20140624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682458 71920 CVE-2014-4623 BUGTRAQ:20141022 ESA-2014-094: EMC Avamar Weak Password Storage Vulnerability  View
682459 71920 CVE-2014-4623 URL:http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html  View
682460 71920 CVE-2014-4623 MISC:http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html  View
682461 71920 CVE-2014-4623 BID:70732  View
682462 71920 CVE-2014-4623 URL:http://www.securityfocus.com/bid/70732  View
682463 71920 CVE-2014-4623 SECTRACK:1031117  View
682464 71920 CVE-2014-4623 URL:http://www.securitytracker.com/id/1031117  View
682465 71920 CVE-2014-4623 XF:emc-avamar-cve20144623-info-disc(97757)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16964 JVNDB-2014-005839 RSA Adaptive Authentication における認証を回避される脆弱性 RSA Adaptive Authentication (On-Premise) は、Challenge SOAP コールでデバイスバインドを使用する、または Out-of-Band Phone (Authentify) 機能を備えた RSA Adaptive Authentication Integration Adapters を使用する場合、認証失敗した場合でも恒久的なデバイス接続を行うため、認証を回避される脆弱性が存在します。 CVE-2014-4631 71920 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005839.html  View