CVE

Id
45050  
CVE No.
CVE-2010-2466  
Status
Candidate  
Description
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attackers to obtain sensitive information via requests for full_*.dar files with predictable filenames.  
Phase
Assigned (20100625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
491302 45050 CVE-2010-2466 MISC:http://blip.tv/file/3414004  View
491303 45050 CVE-2010-2466 MISC:http://www.darkreading.com/blog/archives/2010/04/attacking_door.html  View
491304 45050 CVE-2010-2466 MISC:http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2  View
491305 45050 CVE-2010-2466 MISC:http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon  View
491306 45050 CVE-2010-2466 CERT-VN:VU#228737  View
491307 45050 CVE-2010-2466 URL:http://www.kb.cert.org/vuls/id/228737  View
491308 45050 CVE-2010-2466 XF:netbox-database-backups-info-disclosure(59826)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39119 JVNDB-2010-004904 Bugzilla の Install/Filesystem.pm における重要なデータを取得される脆弱性 Bugzilla の Install/Filesystem.pm は、use_suexec が有効になっている際、(1) .bzr/ および (2) data/webdot/ の配下内で world-readable パーミッション (誰でも読み取り可能な権限) を使用するため、重要なデータを取得される脆弱性が存在します。 CVE-2010-2470 45050 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004904.html  View