PT-2002-2585 · Iomega · Iomega Nas A300U

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1863

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Iomega Network Attached Storage (NAS) A300U

Description The issue allows local users to access home directories via FTP even when access to all shared directories has been disabled, because the FTP service cannot be disabled.

Recommendations For Iomega Network Attached Storage (NAS) A300U, consider restricting access to the FTP service as a temporary workaround until a more permanent solution is available.

Fix

Related Identifiers

CVE-2002-1863

Affected Products

Iomega Nas A300U

References · 3

• http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1863 · Security Note
• http://iss.net/security_center/static/10530.php · Note