CVE-2012-2291
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
21/01/2013
Last modified:
11/04/2025
Description
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Impact
Base Score 2.0
7.20
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:emc:avamar:4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:4.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:5.0:sp1:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:5.0:sp2:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:5.0.0-407:*:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:5.0.4-26:*:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar:6.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | ||
| cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar_plugin:4.0:-:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar_plugin:5.0:-:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar_plugin:6.0:-:*:*:*:*:*:* | ||
| cpe:2.3:a:emc:avamar_plugin:6.1:-:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page