CVE-2010-2860
First published: Thu Aug 05 2010(Updated: )
The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC Celerra Network Attached Storage |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html
- http://securitytracker.com/id?1024271
- http://www.exploit-db.com/exploits/14536
- http://www.securityfocus.com/archive/1/512823/100/0/threaded
- http://www.securityfocus.com/archive/1/513564/100/0/threaded
- http://www.securityfocus.com/bid/42134
- http://www.vupen.com/english/advisories/2010/2337
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60885
- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt
Frequently Asked Questions
What is the severity of CVE-2010-2860?
CVE-2010-2860 is classified as a critical vulnerability due to the potential for unauthorized access to sensitive user data.
How do I fix CVE-2010-2860?
To mitigate CVE-2010-2860, it is recommended to apply the latest security patches and restrict external network access to the EMC Celerra Network Attached Storage.
What systems are affected by CVE-2010-2860?
CVE-2010-2860 affects the EMC Celerra Network Attached Storage appliances.
What type of attacks can exploit CVE-2010-2860?
CVE-2010-2860 can be exploited through NFS requests, allowing remote attackers to manipulate files in the user data directory.
Is there a workaround for CVE-2010-2860 while waiting for a patch?
A possible workaround for CVE-2010-2860 includes configuring firewall rules to block unauthorized access to the internal IP addresses of the EMC Celerra appliance.
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/author
- agent/description
- vendor/emc
- canonical/emc celerra network attached storage