NVD

Id
17266  
Name
CVE-2016-0917  
Description
The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638), VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra (all supported versions) does not prevent duplicate NTLM challenge-response nonces, which makes it easier for remote attackers to execute arbitrary code, or read or write to files, via a series of authentication requests, a related issue to CVE-2010-0231.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-20  
Modified Date
2017-01-17  
Seq
2016-0917  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95803 17266 CVE-2016-0917 20160919 ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability  View
95804 17266 CVE-2016-0917 http://www.securityfocus.com/archive/1/539993/30/0/threaded  View
95805 17266 CVE-2016-0917 93023  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4091 JVNDB-2016-004864 複数の EMC VNX 製品の SMB サービスにおける任意のコードを実行される脆弱性 EMC VNXe、VNX1 File OE、および VNX2 File OE の SMB サービスは、NTLM チャレンジレスポンスのナンスの重複を阻止しないため、任意のコードを実行される、またはファイルを読み書きされる脆弱性が存在します。 CVE-2016-0917 87121 CVE-2016-0917 17266 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004864.html 2016-09-19 2016-09-27 View