CVE-2014-4623 | BDVDB-2026-65834 Detail

Description#

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/70732
https://exchange.xforce.ibmcloud.com/vulnerabilities/97757
http://www.securitytracker.com/id/1031117
http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html
http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html

Exploit#

No public exploit known

History#

Version 12014-10-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.