EMC Avamar cryptographic Vulnerability (CVE-2014-4623)

EMC Avamar cryptographic Vulnerability (CVE-2014-4623)

Release date:
Updated on:

Affected Systems:
EMC Avamar 6.x
Description:
Bugtraq id: 70732
CVE (CAN) ID: CVE-2014-4623

EMC Avamar is a remote backup and recovery solution.

EMC Avamar Data Store (ADS), Avamar Virtual Edition (AVE) 6. in versions x and 7.0.x, after Password Hardening 2.0.0.4 is enabled, the Password hash is encrypted using unix des, which allows independent context attackers to obtain the plaintext Password through brute force attacks.

<* Source: Thorsten T & #195; & #188; llmann
*>

Suggestion:
Vendor patch:

EMC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html

This article permanently updates the link address: