CVE-2014-5457

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://seclists.org/fulldisclosure/2014/Jul/59
http://seclists.org/fulldisclosure/2014/Jul/58
http://seclists.org/fulldisclosure/2014/Jul/57
http://seclists.org/fulldisclosure/2014/Jul/61

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:qnap:ts-469u_firmware:4.0.7:*:*:*:*:*:*:*

cpe:2.3:h:qnap:ts-469u:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:qnap:ts-ec1679u-rp_firmware:4.0.7:*:*:*:*:*:*:*

cpe:2.3:h:qnap:ts-ec1679u-rp:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:qnap:ts-459u_firmware:4.0.7:*:*:*:*:*:*:*

cpe:2.3:h:qnap:ts-459u:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:qnap:ss-839_firmware:4.0.7:*:*:*:*:*:*:*

cpe:2.3:h:qnap:ss-839:-:*:*:*:*:*:*:*

Information

Published : 2014-08-25 09:55

Updated : 2014-08-26 10:21

NVD link : CVE-2014-5457

Mitre link : CVE-2014-5457

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Products Affected

qnap

ss-839
ts-459u
ss-839_firmware
ts-ec1679u-rp
ts-ec1679u-rp_firmware
ts-469u_firmware
ts-469u
ts-459u_firmware

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://seclists.org/fulldisclosure/2014/Jul/59", "name": "20140711 Re: QNAP TS-469U shadow file world readable", "tags": [], "refsource": "FULLDISC"}, {"url": "http://seclists.org/fulldisclosure/2014/Jul/58", "name": "20140711 Re: QNAP TS-469U shadow file world readable", "tags": [], "refsource": "FULLDISC"}, {"url": "http://seclists.org/fulldisclosure/2014/Jul/57", "name": "20140711 QNAP TS-469U shadow file world readable", "tags": [], "refsource": "FULLDISC"}, {"url": "http://seclists.org/fulldisclosure/2014/Jul/61", "name": "20140711 Re: QNAP TS-469U shadow file world readable", "tags": [], "refsource": "FULLDISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-5457", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-08-25T16:55Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:qnap:ts-469u_firmware:4.0.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:qnap:ts-469u:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:qnap:ts-ec1679u-rp_firmware:4.0.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:qnap:ts-ec1679u-rp:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:qnap:ts-459u_firmware:4.0.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:qnap:ts-459u:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:qnap:ss-839_firmware:4.0.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:qnap:ss-839:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2014-08-26T17:21Z"}

2.1 /10