CVE-2010-2465

Description

The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.

References

http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2

http://www.securityfocus.com/bid/41134

http://www.kb.cert.org/vuls/id/MAPG-83TQL8

http://www.kb.cert.org/vuls/id/251133

http://www.darkreading.com/blog/archives/2010/04/attacking_door.html

http://secunia.com/advisories/40374

http://osvdb.org/65757

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS