NVD

Id
44107  
Name
CVE-2012-2291  
Description
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-01-21  
Modified Date
2013-01-22  
Seq
2012-2291  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221515 44107 CVE-2012-2291 20130121 Re: EMC Avamar: World writable cache files  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19648 JVNDB-2013-001223 EMC Avamar Client および EMC Avamar Plugin における権限を取得される脆弱性 HP-UX および Mac OS X で稼働する EMC Avamar Client および Oracle 用の EMC Avamar Plugin は、キャッシュディレクトリに対して誰でも書き込みできる権限 (world-writable permissions) を用いることで、権限を取得される脆弱性が存在します。 CVE-2012-2291 55529 CVE-2012-2291 44107 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001223.html 2013-01-21 2013-01-23 View