EMC Avamar (CVE-2011-0442) Information Disclosure Vulnerability
BID:46879
Info
EMC Avamar (CVE-2011-0442) Information Disclosure Vulnerability
| Bugtraq ID: | 46879 |
| Class: | Design Error |
| CVE: |
CVE-2011-0442 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 15 2011 12:00AM |
| Updated: | Mar 15 2011 12:00AM |
| Credit: | C4 |
| Vulnerable: |
EMC Avamar 5.0.3 EMC Avamar 5.0.2 EMC Avamar 4.1.2 EMC Avamar 5.0.3-29 EMC Avamar 5.0.2-41 EMC Avamar 5.0.1-32 EMC Avamar 5.0.1 EMC Avamar 5.0.0-407 EMC Avamar 5.0 SP1 EMC Avamar 5.0 EMC Avamar 4.1.2-33 EMC Avamar 4.1.1-340 EMC Avamar 4.1.1 EMC Avamar 4.1.0-1470 EMC Avamar 4.1 |
| Not Vulnerable: |
EMC Avamar 5.0.4-26 EMC Avamar 5.0.4 |
Discussion
EMC Avamar (CVE-2011-0442) Information Disclosure Vulnerability
EMC Avamar is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information, such as user authentication credentials. Information obtained may lead to further attacks.
EMC Avamar is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information, such as user authentication credentials. Information obtained may lead to further attacks.
Exploit / POC
EMC Avamar (CVE-2011-0442) Information Disclosure Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
EMC Avamar (CVE-2011-0442) Information Disclosure Vulnerability
Solution:
The vendor has released updates. Please contact the vendor for details.
Solution:
The vendor has released updates. Please contact the vendor for details.
References
EMC Avamar (CVE-2011-0442) Information Disclosure Vulnerability
References:
References:
- Avamar Homepage (EMC)
- ESA-2011-007: EMC Avamar sensitive information disclosure (Security_Alert)