PT-2010-4355 · Emc · Emc Celerra

Steve Ocepek · Publicado 2010-08-04 · Atualizado 2018-10-10 · CVE-2010-2860

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Celerra Network Attached Storage (NAS) appliance (affected versions not specified)

Description The issue allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests, as the appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2860

Produtos afetados

Emc Celerra

Referências · 11

• 🔥 https://exploit-db.com/exploits/14536 · Exploit
• 🔥 http://exploit-db.com/exploits/14536 · Exploit
• http://securityfocus.com/archive/1/512823/100/0/threaded · Nota
• http://securityfocus.com/archive/1/513564/100/0/threaded · Nota
• http://securitytracker.com/id?1024271 · Nota
• http://vupen.com/english/advisories/2010/2337 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2860 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60885 · Nota
• http://securityfocus.com/bid/42134 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html · Nota
• https://trustwave.com/spiderlabs/advisories/TWSL2010-003.txt · Nota