CVE-2012-2291

EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
VendorProductVersion
emcavamar
4.0
emcavamar
4.1
emcavamar
5.0
emcavamar
5.0:sp1
emcavamar
5.0:sp2
emcavamar
5.0.0-407
emcavamar
5.0.4-26
emcavamar
6.0
emcavamar_plugin
4.0
emcavamar_plugin
5.0
emcavamar_plugin
6.0
emcavamar_plugin
6.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html
http://archives.neohapsis.com/archives/bugtraq/2013-01/0086.html