CVE-2016-0920

High

Published: 21/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before version 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration.

Risk Assessment

This vulnerability may lead to unauthorized access to the system, posing a serious threat to the integrity and confidentiality of data within the organization.

Recommendation

It is recommended to upgrade to version 7.3.0-233 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in EMC Avamar Server

CVE-2016-0904High
Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before version 7.3.0-233 use the same encryption key across different customers' installations, allowing remote attackers to defeat cryptographic protection mechanisms.

Original NVD description (English source)

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration.