PT-2014-4395 · Netapp · Nextapp File Explorer

Publicado 2014-07-20 · Atualizado 2015-08-05 · CVE-2014-1973

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NextApp File Explorer versions prior to 2.1.0.3

Description The issue allows remote attackers to overwrite or create arbitrary files via a crafted filename, due to a directory traversal vulnerability in the NextApp File Explorer application for Android.

Recommendations For versions prior to 2.1.0.3, update to version 2.1.0.3 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2014-1973

Produtos afetados

Nextapp File Explorer

Referências · 4

• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000081 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-1973 · Nota de Segurança
• http://jvn.jp/en/jp/JVN84335912/index.html · Aviso do Fabricante
• http://securityfocus.com/bid/68726 · Nota