PT-2002-2585 · Iomega · Iomega Nas A300U

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1863

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Iomega Network Attached Storage (NAS) A300U

Description The issue allows local users to access home directories via FTP even when access to all shared directories has been disabled, because the FTP service cannot be disabled.

Recommendations For Iomega Network Attached Storage (NAS) A300U, consider restricting access to the FTP service as a temporary workaround until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2002-1863

Produtos afetados

Iomega Nas A300U

Referências · 3

• http://iss.net/security_center/static/10530.php · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1863 · Nota de Segurança