GCVE - cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Avamar Server (`b8e6e4c1-699c-5164-bbab-03f50e0da763`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-0921`	vulnerable	2026-06-08 05:07:16.559553	Details available Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified directories, which allows local users to obtain root access by replacing a script with a Trojan horse program. Published: 2016-09-21T01:00:00.000Z Updated: 2024-08-05T22:38:41.550Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93032 http://seclists.org/bugtraq/2016/Sep/31 http://www.securitytracker.com/id/1036844	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0920`	vulnerable	2026-06-08 05:07:16.559222	Details available Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration. Published: 2016-09-21T01:00:00.000Z Updated: 2024-08-05T22:38:41.278Z Open on db.gcve.eu Reference links http://seclists.org/bugtraq/2016/Sep/31 http://www.securitytracker.com/id/1036844	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0905`	vulnerable	2026-06-08 05:07:16.504990	Details available Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command. Published: 2016-09-21T01:00:00.000Z Updated: 2024-08-05T22:38:41.210Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93032 http://seclists.org/bugtraq/2016/Sep/31 http://www.securitytracker.com/id/1036844	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0904`	vulnerable	2026-06-08 05:07:16.504671	Details available Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by leveraging knowledge of this key from another installation. Published: 2016-09-21T01:00:00.000Z Updated: 2024-08-05T22:38:41.258Z Open on db.gcve.eu Reference links http://seclists.org/bugtraq/2016/Sep/31 http://www.securityfocus.com/bid/93026 http://www.securitytracker.com/id/1036844	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0903`	vulnerable	2026-06-08 05:07:16.504241	Details available Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent. Published: 2016-09-21T01:00:00.000Z Updated: 2024-08-05T22:38:40.541Z Open on db.gcve.eu Reference links http://seclists.org/bugtraq/2016/Sep/31 http://www.securityfocus.com/bid/93026 http://www.securitytracker.com/id/1036844	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3275`	vulnerable	2026-06-08 05:04:30.744220	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3274`	vulnerable	2026-06-08 05:04:30.737655	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.