CVE-2013-0944 Path traversal in n/a

What is CVE-2013-0944?

CVE-2013-0944 is a low-severity path traversal vulnerability in n/a, published on 3 May 2013. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.

Weakness: CWE-200

Which versions are affected by CVE-2013-0944?

It affects 1 product.

Products include Emc Avamar.

How do I fix CVE-2013-0944?

No fix has been published for CVE-2013-0944 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2013-0944 being exploited?

There is no known exploitation of CVE-2013-0944 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-0945 Security feature bypass in n/a Critical 9.3
• CVE-2016-0906 Missing authorization in n/a High 8.8
• CVE-2011-0648 Privilege escalation in n/a High 8.5
• CVE-2011-1740 Missing authorization in n/a High 7.7
• CVE-2012-2291 Privilege escalation in n/a High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2827-wxfv-j2r7.