CVE-2011-0442: Low severity emc avamar virtual edition vulnerability
The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0442?
CVE-2011-0442 has a high severity rating due to the risk of sensitive information exposure over cleartext communication.
How do I fix CVE-2011-0442?
To fix CVE-2011-0442, upgrade EMC Avamar to version 5.0.4 or later to ensure secure transmission of event details.
What systems are affected by CVE-2011-0442?
CVE-2011-0442 affects EMC Avamar versions 5.0.0-407 and prior, including specific instances of version 5.0 and 5.0-sp1.
What type of information is vulnerable in CVE-2011-0442?
CVE-2011-0442 makes event details, including service requests and email messages, susceptible to interception by attackers.
Can CVE-2011-0442 be exploited remotely?
Yes, CVE-2011-0442 can be exploited remotely by an attacker sniffing the network traffic to capture unencrypted event data.