EMC Avamar CVE-2013-0945 Multiple SSL Certificate Validation Spoofing Vulnerabilities
BID:59621
Info
EMC Avamar CVE-2013-0945 Multiple SSL Certificate Validation Spoofing Vulnerabilities
| Bugtraq ID: | 59621 |
| Class: | Design Error |
| CVE: |
CVE-2013-0945 |
| Remote: | Yes |
| Local: | No |
| Published: | May 02 2013 12:00AM |
| Updated: | May 02 2013 12:00AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
EMC Avamar 5.0.3 EMC Avamar 5.0.2 EMC Avamar 5.0.4 EMC Avamar 5.0.1 EMC Avamar 5.0 EMC Amavar 6.0 |
| Not Vulnerable: | |
Discussion
EMC Avamar CVE-2013-0945 Multiple SSL Certificate Validation Spoofing Vulnerabilities
EMC Avamar is prone to multiple security vulnerabilities that may allow attackers to conduct spoofing attacks.
Attackers can exploit these issues to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Versions prior to EMC Avamar 6.x are vulnerable.
EMC Avamar is prone to multiple security vulnerabilities that may allow attackers to conduct spoofing attacks.
Attackers can exploit these issues to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Versions prior to EMC Avamar 6.x are vulnerable.
Exploit / POC
EMC Avamar CVE-2013-0945 Multiple SSL Certificate Validation Spoofing Vulnerabilities
An attacker can exploit these issues using readily available tools.
An attacker can exploit these issues using readily available tools.
Solution / Fix
EMC Avamar CVE-2013-0945 Multiple SSL Certificate Validation Spoofing Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
EMC Avamar CVE-2013-0945 Multiple SSL Certificate Validation Spoofing Vulnerabilities
References:
References:
- EMC Homepage (EMC)