CVE-2010-2860

The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2010-08-05

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Celerra Network Attached Storage (Emc)

References

• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html
• http://securitytracker.com/id?1024271
• http://www.exploit-db.com/exploits/14536
• http://www.securityfocus.com/archive/1/512823/100/0/threaded
• http://www.securityfocus.com/archive/1/513564/100/0/threaded
• http://www.securityfocus.com/bid/42134
• http://www.vupen.com/english/advisories/2010/2337
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60885
• https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt