« Volver al listado

CVE-2011-0442

Estado: ModificadaBaja (3.5)—

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Avamar

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-0442",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-03-16T22:55:02.763",
  "references": [
    {
      "url": "http://secunia.com/advisories/43797",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://securityreason.com/securityalert/8139",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/517022/100/0/threaded",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/46879",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1025213",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0677",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0678",
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66109",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://secunia.com/advisories/43797",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/8139",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/517022/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/46879",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1025213",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0677",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0678",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66109",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network."
    },
    {
      "lang": "es",
      "value": "La utilidad de servicio en EMC Avamar v5.x anterior a v5.0.4 utiliza texto claro para transmitir los detalles del evento en una (1) petición de servicio y (2) mensajes de correo electrónico, lo que podría permitir a atacantes remotos obtener información sensible espiando la red ."
    }
  ],
  "lastModified": "2026-06-16T23:27:23.620",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A25C534A-92AD-454C-AAC0-63C6A1F329E6",
              "versionEndIncluding": "5.0.0-407"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56741A4C-2A47-47D5-BA57-73CF24F41267"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "866AFF0F-F25C-4B11-AAD3-5AE12257CAEF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}