« Volver al listado

CVE-2012-2291

Estado: ModificadaAlta (7.2)—

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

EMC — AvamarEMC — Avamar Plugin

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2291",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-01-21T21:55:00.887",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack."
    },
    {
      "lang": "es",
      "value": "EMC Avamar Client v4.x, v5.x y 6.x en HP-UX y Mac OS X, y el complemento EMC Avamar v4.x, v5.x, y x6.x para Oracle, usa permisos de escritura globales para directorios cache, lo que permite a usuarios locales ibtener privilegios a través de ataque simbólico sin especificar"
    }
  ],
  "lastModified": "2026-06-16T23:41:17.937",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:avamar:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "012C16C2-8904-4584-8B22-2D311388A7CF"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F0D5A62-9AF8-4E4B-A208-7772386794A9"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56741A4C-2A47-47D5-BA57-73CF24F41267"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "866AFF0F-F25C-4B11-AAD3-5AE12257CAEF"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13D2AF12-9343-4961-9FDE-BEAD12E528B8"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0.0-407:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A853F02F-67BA-42E6-8D31-78EEA579A7E7"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:5.0.4-26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8F939D7-8E59-426A-8B80-30E6BA7384F4"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3ED3F62-A7F2-4E23-9000-1E0FCBC6B5B5"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
            },
            {
              "criteria": "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "61A4F116-1FEE-450E-99AE-6AD9ACDDE570"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:avamar_plugin:4.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BC4F1CA-C242-45F5-898F-654B3CAD2371"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_plugin:5.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE4EEB30-C72F-47E0-994D-8902E7A8ED92"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_plugin:6.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C9AF37A-2770-475D-AED0-B6DB71FA1C45"
            },
            {
              "criteria": "cpe:2.3:a:emc:avamar_plugin:6.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8303546F-32A4-4245-B806-275F817A5EAA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}