PT-2001-2230 · Netapp · Netcache

Published 2001-07-05 · Updated 2017-12-19 · CVE-2001-1087

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetCache devices (affected versions not specified)

Description The default configuration of the config.http.tunnel.allow ports option allows remote attackers to connect to arbitrary ports on remote systems behind the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1087

Affected Products

Netcache

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-1087 · Security Note
• http://securityfocus.com/archive/1/195176 · Vendor Advisory
• http://securityfocus.com/bid/2990 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1087 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6807 · Note