CVE-2010-2860

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export2010-08-03 · remote · hardware

Impact

The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html
• http://securitytracker.com/id?1024271
• http://www.exploit-db.com/exploits/14536
• http://www.securityfocus.com/archive/1/512823/100/0/threaded
• http://www.securityfocus.com/archive/1/513564/100/0/threaded
• http://www.securityfocus.com/bid/42134
• http://www.vupen.com/english/advisories/2010/2337
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60885
• https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt
• http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html
• http://securitytracker.com/id?1024271
• http://www.exploit-db.com/exploits/14536
• http://www.securityfocus.com/archive/1/512823/100/0/threaded
• http://www.securityfocus.com/archive/1/513564/100/0/threaded
• http://www.securityfocus.com/bid/42134
• http://www.vupen.com/english/advisories/2010/2337
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60885
• https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt