CVE-2010-3684

First published: Wed Sep 29 2010(Updated: )

The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/author
• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/type
• agent/weakness
• collector/nvd-historical
• collector/nvd-index
• vendor/synology
• canonical/synology dsm
• version/synology dsm/2.2-0942
• version/synology dsm/2.2-1041
• version/synology dsm/2.2-1042
• version/synology dsm/2.2-1045
• version/synology dsm/2.3-1139
• version/synology dsm/2.3-1141
• version/synology dsm/2.3-1144
• version/synology dsm/2.3-1157
• version/synology dsm/2.3-1161
• canonical/synology disk station ds1010\+
• canonical/synology disk station ds109
• canonical/synology disk station ds110\+
• canonical/synology disk station ds110j
• canonical/synology disk station ds209
• canonical/synology disk station ds210\+
• canonical/synology disk station ds210j
• canonical/synology disk station ds409slim
• canonical/synology disk station ds410
• canonical/synology disk station ds410j
• canonical/synology disk station ds411\+
• canonical/synology disk station ds710\+