← All advisories

Unrated severityNVD Advisory· Published May 3, 2013· Updated Jun 16, 2026

CVE-2013-0944

CVE-2013-0944

Description

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.

Affected products

10

EMC Corporation/Avamar9 versions
cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:5.0.0-407:*:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:5.0.4-26:*:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:5.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:5.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:emc:avamar:6.0.3:*:*:*:*:*:*:*
EMC Corporation/Avamar Serverllm-fuzzy
Range: <6.1.0

Patches

Vulnerability mechanics

References

1

archives.neohapsis.com/archives/bugtraq/2013-05/0012.htmlnvd

News mentions

0

No linked articles in our index yet.