PT-2010-4043 · S2 Security · S2 Security Netbox

Published 2010-06-25 · Updated 2017-08-17 · CVE-2010-2467

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions S2 Security NetBox versions 2.x through 3.x

Description The issue allows remote attackers to download database backup files via unspecified FTP requests because the FTP server that stores these backups does not require a password to be set. This makes it easier for attackers to access sensitive data.

Recommendations For versions 2.x through 3.x, set a strong password for the FTP server to prevent unauthorized access to database backups.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-2467

Affected Products

S2 Security Netbox

References · 6

• 🔥 http://securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 · Exploit
• 🔥 http://blip.tv/file/3414004 · Exploit
• 🔥 http://slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2467 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59828 · Note
• http://darkreading.com/blog/archives/2010/04/attacking_door.html · Note