CVE-2016-0906

Related Files

EMC Avamar Data Store / Virtual Edition Unauthorized Data Access

Posted Jul 6, 2016

Site emc.com

EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) have released a fix for a vulnerability that may potentially lead to denial of service and data disclosure. When restoring backups of Linux Avamar clients using the web restore interface, a malicious Avamar Client user may read and/or delete critical directories on the Avamar Server. This may lead to a denial-of-service attack on the Avamar Server, or unauthorized access to Avamar Server data by the malicious Avamar Client user. All supported versions prior to 7.3.0 of EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) are affected.

tags | advisory, web, denial of service

systems | linux

advisories | CVE-2016-0906

SHA-256 | 572a5c2a703d7f692f7e1966646f0725a31f3596c40aa8ddb112bc055aaa002c

Download | Favorite | View