Description
RaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key.
References
- 29401 third-party-advisory
- 3760 third-party-advisory
- 20080316 raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition) mailing-list
- 28264 vdb-entry