PT-2007-3492 · Bluearc · Bluearc Titan 2X00

Publicado 2007-04-19 · Atualizado 2018-10-16 · CVE-2007-2150

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions BlueArc Titan 2x00 devices with firmware 4.2.944b

Description The issue allows remote attackers to redirect traffic to other sites via the PORT command. This is related to an FTP bounce attack.

Recommendations For BlueArc Titan 2x00 devices with firmware 4.2.944b, consider restricting access to the FTP service until a patch is available. As a temporary workaround, disabling the use of the PORT command may help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2150

Produtos afetados

Bluearc Titan 2X00

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/33721 · Nota
• http://osvdb.org/35414 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2150 · Nota de Segurança
• http://securityfocus.com/bid/23540 · Correção
• http://securityfocus.com/archive/1/466025/100/0/threaded · Nota