CVE-2015-6003

Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.kb.cert.org/vuls/id/751328	Third Party Advisory US Government Resource
http://www.securitytracker.com/id/1033794
https://www.qnap.com/i/en/support/con_show.php?cid=85	Vendor Advisory
http://www.kb.cert.org/vuls/id/751328	Third Party Advisory US Government Resource
http://www.securitytracker.com/id/1033794
https://www.qnap.com/i/en/support/con_show.php?cid=85	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:qnap:qts::::::::
	cpe:2.3:o:qnap:qts::rc1::::::*

History

21 Nov 2024, 02:34

Type	Values Removed	Values Added
References	~~() http://www.kb.cert.org/vuls/id/751328 - Third Party Advisory, US Government Resource~~	() http://www.kb.cert.org/vuls/id/751328 - Third Party Advisory, US Government Resource
References	~~() http://www.securitytracker.com/id/1033794 -~~	() http://www.securitytracker.com/id/1033794 -
References	~~() https://www.qnap.com/i/en/support/con_show.php?cid=85 - Vendor Advisory~~	() https://www.qnap.com/i/en/support/con_show.php?cid=85 - Vendor Advisory

Information

Published : 2015-10-16 01:59

Updated : 2024-11-21 02:34

NVD link : CVE-2015-6003

Mitre link : CVE-2015-6003

CVE.ORG link : CVE-2015-6003

JSON object : View

Products Affected

qnap

qts

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2015-6003", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-16T01:59:04.590", "references": [{"url": "http://www.kb.cert.org/vuls/id/751328", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.securitytracker.com/id/1033794", "source": "cret@cert.org"}, {"url": "https://www.qnap.com/i/en/support/con_show.php?cid=85", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/751328", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1033794", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.qnap.com/i/en/support/con_show.php?cid=85", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en QNAP QTS en versiones anteriores a 4.1.4 build 0910 y 4.2.x en versiones anteriores a 4.2.0 RC2 build 0910, cuando AFP esta habilitado, permite a atacantes remotos leer o escribir en archivos arbitrarios mediante aprovechando el acceso a una cuenta OS X (1) usuario o (2) invitado."}], "lastModified": "2024-11-21T02:34:16.583", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C1A57FA-64F7-4C5E-BBA2-2387CAD4FD51", "versionEndIncluding": "4.1.4"}, {"criteria": "cpe:2.3:o:qnap:qts:*:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1873085-1EB4-475E-9C25-2BB41ACFC51E", "versionEndIncluding": "4.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}