Unscored CVE-2016-0920 EUVD-2016-0931GHSA-hpgx-jp4h-3qqq

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via …

Published Sep 21, 2016 · Updated Aug 5, 2024 · Assigned by dell

Description

Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration.

References

20160919 ESA-2016-065: EMC Avamar Data Store and Avamar Virtual Edition Multiple Vulnerabilities mailing-list
1036844 vdb-entry