PT-2010-4355 · Emc · Emc Celerra

Steve Ocepek · Published 2010-08-04 · Updated 2018-10-10 · CVE-2010-2860

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Celerra Network Attached Storage (NAS) appliance (affected versions not specified)

Description The issue allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests, as the appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2860

Affected Products

Emc Celerra

References · 11

• 🔥 https://exploit-db.com/exploits/14536 · Exploit
• 🔥 http://exploit-db.com/exploits/14536 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2860 · Security Note
• http://securityfocus.com/archive/1/512823/100/0/threaded · Note
• http://securityfocus.com/archive/1/513564/100/0/threaded · Note
• http://securitytracker.com/id?1024271 · Note
• http://vupen.com/english/advisories/2010/2337 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60885 · Note
• http://securityfocus.com/bid/42134 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html · Note
• https://trustwave.com/spiderlabs/advisories/TWSL2010-003.txt · Note