CVE-2010-2465

The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://blip.tv/file/3414004	Exploit
http://osvdb.org/65757
http://secunia.com/advisories/40374
http://www.darkreading.com/blog/archives/2010/04/attacking_door.html
http://www.kb.cert.org/vuls/id/251133	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-83TQL8
http://www.securityfocus.com/bid/41134
http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2
http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon	Exploit

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:s2sys:netbox:2.5:::::::*
	cpe:2.3:h:s2sys:netbox:3.3:::::::*
	cpe:2.3:h:s2sys:netbox:4.0:::::::*

Configuration 2 (hide)

OR	cpe:2.3:h:linearcorp:emerge_50::::::::
	cpe:2.3:h:linearcorp:emerge_5000::::::::

Configuration 3 (hide)

cpe:2.3:h:sonitrol:eaccess:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-06-25 21:30

Updated : 2010-07-13 05:52

NVD link : CVE-2010-2465

Mitre link : CVE-2010-2465

CVE.ORG link : CVE-2010-2465

JSON object : View

Products Affected

s2sys

netbox

linearcorp

emerge_50
emerge_5000

sonitrol

eaccess

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2010-2465", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-06-25T21:30:01.547", "references": [{"url": "http://blip.tv/file/3414004", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/65757", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/40374", "source": "cve@mitre.org"}, {"url": "http://www.darkreading.com/blog/archives/2010/04/attacking_door.html", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/251133", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/MAPG-83TQL8", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/41134", "source": "cve@mitre.org"}, {"url": "http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2", "source": "cve@mitre.org"}, {"url": "http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests."}, {"lang": "es", "value": "S2 Security NetBox, probablemente v2.x v3.x, comoel usado en Linear eMerge 50 y 5000 y Sonitrol eAccess, almacena informaci\u00f3n sensible bajo la ra\u00edz web con insuficiente control de acceso, lo que permite a atacantes remotos descargar logs de nodo, fotograf\u00edas de personas, y archivos backup a trav\u00e9s de peticiones no especificadas. \r\n"}], "lastModified": "2010-07-13T05:52:58.483", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:s2sys:netbox:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3922C3C5-2C55-4A0E-B75D-E60C97D40AAD"}, {"criteria": "cpe:2.3:h:s2sys:netbox:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65399B51-DBB1-42E0-978D-D6E1C99A5EC1"}, {"criteria": "cpe:2.3:h:s2sys:netbox:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31F57E74-E9AE-4ED2-B19E-AA0C561B9E4F"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:linearcorp:emerge_50:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D0530B7-711F-4187-829F-A266ADDE8C84"}, {"criteria": "cpe:2.3:h:linearcorp:emerge_5000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA501469-8783-40D7-A52B-E47319A0F593"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sonitrol:eaccess:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "864551FE-2A80-4DFE-BF54-2D6A6470F390"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Per: http://www.kb.cert.org/vuls/id/MAPG-83TQL8\r\n\r\n'Vendor Statement\r\nS2 Security has made available patches or upgrades available to address this vulnerability in all versions of our product (2.5, 3.3, and 4.0). These are available through Linear Customer Support or S2 Customer Support'"}