PT-2012-3921 · Emc · Vnxe+2

Published 2012-07-16 · Updated 2013-03-22 · CVE-2012-2282

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EMC Celerra Network Server versions 6.x before 6.0.61.0 VNX versions 7.x before 7.0.53.2 VNXe versions 2.0 and 2.1 before 2.1.3.19077 VNXe version 2.2 before 2.2.0.19078

Description The issue is related to improper implementation of NFS access control. This allows remote authenticated users to read or modify files via NFSv2, NFSv3, or NFSv4 requests.

Recommendations For EMC Celerra Network Server versions 6.x before 6.0.61.0, update to version 6.0.61.0 or later. For VNX versions 7.x before 7.0.53.2, update to version 7.0.53.2 or later. For VNXe versions 2.0 and 2.1 before 2.1.3.19077, update to version 2.1.3.19077 or later. For VNXe version 2.2 before 2.2.0.19078, update to version 2.2.0.19078 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2282

Affected Products

Emc Celerra Network Server

Vnx

Vnxe

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-2282 · Security Note
• http://securitytracker.com/id?1027242 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-07/0063.html · Note