CVE-2010-2860 Information

Description

The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance which allows remote attackers to read create or modify arbitrary files in the user data directory via NFS requests.

Reference

http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0018.html http://securitytracker.com/id?1024271 http://www.exploit-db.com/exploits/14536 http://www.securityfocus.com/archive/1/512823/100/0/threaded http://www.securityfocus.com/archive/1/513564/100/0/threaded http://www.securityfocus.com/bid/42134 http://www.vupen.com/english/advisories/2010/2337 https://exchange.xforce.ibmcloud.com/vulnerabilities/60885 https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt