Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2013-0945

EPSS 0.21% · P43
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-0945

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
EMC Avamar 多个SSL凭证安全绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EMC Avamar是美国易安信（EMC）公司的数据去重备份和恢复的解决方案。EMC Avamar Client是其中的客户端软件。 EMC Avamar Client 6.1.101-87及之前的版本中存在漏洞，该漏洞源于程序未正确验证在X.509证书的主题的Common Name (CN)或subjectAltName字段中服务器主机名与域名的匹配。中间人攻击者可通过任意有效的证书利用该漏洞欺骗SSL服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-0945

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-0945

请登录查看更多情报信息。

Same Patch Batch · n/a · 2013-05-03 · 14 CVEs total

CVE-2013-0940EMC Networker ‘nsrpush’进程不安全文件权限本地提权漏洞
CVE-2013-0944EMC Avamar Server 未授权访问漏洞
CVE-2013-1231Cisco WebEx Node for MCS和WebEx Meetings Server HTTP实现输入验证漏洞
CVE-2013-1234Cisco IOS XR SNMP模块缓冲区溢出漏洞
CVE-2013-1959Linux Kernel 本地提权漏洞
CVE-2013-1979Linux kernel ‘scm_set_cred’函数权限许可和访问控制问题漏洞
CVE-2013-2017Linux kernel veth驱动程序资源管理错误漏洞
CVE-2013-3056Joomla! 安全绕过漏洞
CVE-2013-3057Joomla! 远程信息泄露漏洞
CVE-2013-3058Joomla! 未明跨站脚本漏洞
CVE-2013-3059Joomla! Voting插件未明跨站脚本漏洞
CVE-2013-3242Joomla! Core 远程拒绝服务漏洞
CVE-2013-3267Joomla! Highlighter插件未明跨站脚本漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-0945

No comments yet

Leave a comment