CVE-2010-2467 The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, wh...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| s2sys netbox | = 2.5 | No fix listed |
| s2sys netbox | = 3.3 | No fix listed |
| s2sys netbox | = 4.0 | No fix listed |
| linearcorp emerge 50 | All versions | No fix listed |
| linearcorp emerge 5000 | All versions | No fix listed |
| sonitrol eaccess | All versions | No fix listed |
References
- blip.tv exploit
- www.darkreading.com
- www.securityinfowatch.com exploit
- www.slideshare.net exploit
- netbox-ftpserver-file-download(59828) vdb-entry