CVE

Id
45049  
CVE No.
CVE-2010-2465  
Status
Candidate  
Description
The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.  
Phase
Assigned (20100625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
491290 45049 CVE-2010-2465 MISC:http://blip.tv/file/3414004  View
491291 45049 CVE-2010-2465 MISC:http://www.darkreading.com/blog/archives/2010/04/attacking_door.html  View
491292 45049 CVE-2010-2465 MISC:http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2  View
491293 45049 CVE-2010-2465 MISC:http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon  View
491294 45049 CVE-2010-2465 CONFIRM:http://www.kb.cert.org/vuls/id/MAPG-83TQL8  View
491295 45049 CVE-2010-2465 CERT-VN:VU#251133  View
491296 45049 CVE-2010-2465 URL:http://www.kb.cert.org/vuls/id/251133  View
491297 45049 CVE-2010-2465 BID:41134  View
491298 45049 CVE-2010-2465 URL:http://www.securityfocus.com/bid/41134  View
491299 45049 CVE-2010-2465 OSVDB:65757  View
491300 45049 CVE-2010-2465 URL:http://osvdb.org/65757  View
491301 45049 CVE-2010-2465 SECUNIA:40374  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39118 JVNDB-2010-004903 Linear eMerge などにおける Video Recorder データを取得される脆弱性 Linear eMerge は、IEIeMerge アカウントに対して eMerge のデフォルトパスワードを使用するため、Video Recorder データを取得される脆弱性が存在します。 CVE-2010-2469 45049 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004903.html  View