NVD

Id
27036  
Name
CVE-2015-6003  
Description
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-10-15  
Modified Date
2016-12-07  
Seq
2015-6003  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143109 27036 CVE-2015-6003 VU#751328  View
143110 27036 CVE-2015-6003 1033794  View
143111 27036 CVE-2015-6003 https://www.qnap.com/i/en/support/con_show.php?cid=85  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9880 JVNDB-2015-005200 QNAP QTS にパストラバーサルの脆弱性 QNAP QTS は、Network Attached Storage (NAS) の OS です。QNAP QTS には、AFP プロトコルで OS X からアクセスされる場合にパストラバーサルの脆弱性が存在します。 CVE-2015-6003 83228 CVE-2015-6003 27036 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005200.html 2015-10-12 2015-10-19 View