Description
The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export EDB-14536 · remote · Aug 3, 2010
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt
- 1024271 vdb-entry
- ADV-2010-2337 vdb-entry
- 20100803 TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance mailing-list
- 20100802 TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance mailing-list
- 14536 exploit
- celerra-ipaddress-unauth-access(60885) vdb-entry
- 42134 vdb-entry
- 20100908 ESA-2010-015: EMC Celerra NFS authentication bypass vulnerability using IP spoofing. mailing-list