Description
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack.
References
- 20021101 Iomega NAS A300U security and inter-operability issues mailing-list
- 6093 vdb-entry
- iomega-nas-a300u-mitm(10523) vdb-entry