7.2

CVE-2012-2291

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Avamar Version 4.0
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 4.1
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 5.0
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 5.0 Update sp1
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 5.0 Update sp2
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 5.0.0-407
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 5.0.4-26
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Version 6.0
   Apple ≫ macOS X
   Hp ≫ Hp-ux
Emc ≫ Avamar Plugin Version 4.0 Update -
Emc ≫ Avamar Plugin Version 5.0 Update -
Emc ≫ Avamar Plugin Version 6.0 Update -
Emc ≫ Avamar Plugin Version 6.1 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.252
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html