CVE-2016-0921

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions prior to 7.3.0-233

Description The issue concerns weak permissions for unspecified directories in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE), allowing local users to gain root access. This can be achieved by replacing a script with a Trojan horse program, enabling unauthorized access and control.

Recommendations For versions prior to 7.3.0-233, update to version 7.3.0-233 or later to resolve the issue.