Details of VAR-201408-0346

ID

VAR-201408-0346

CVE

CVE-2014-5457

TITLE

plural QNAP Vulnerability to obtain user name and hashed password in product firmware

Trust: 0.8

sources: JVNDB: JVNDB-2014-003949

DESCRIPTION

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password. QNAP Systems QNAP TS-469U Turbo NAS is a NAS storage server from QNAP Systems. An insecure file permission vulnerability exists in QNAP Systems QNAP TS-469U Turbo NAS. A local attacker could use this vulnerability to gain permissions to a globally readable file and extract sensitive information from it. There are security vulnerabilities in QNAP TS-469U Turbo NAS running 4.0.7 Build 20140410 firmware, other versions may also be affected. Information obtained may aid in other attacks. read permission

Trust: 2.52

sources: NVD: CVE-2014-5457 // JVNDB: JVNDB-2014-003949 // CNNVD: CNNVD-201407-302 // BID: 68510 // VULHUB: VHN-73399

AFFECTED PRODUCTS

vendor:	qnap	model:	ts-469u	scope:	eq	version:	4.0.7	Trust: 1.6
vendor:	qnap	model:	ss-839	scope:	eq	version:	4.0.7	Trust: 1.6
vendor:	qnap	model:	ts-ec1679u-rp	scope:	eq	version:	4.0.7	Trust: 1.6
vendor:	qnap	model:	ts-459u	scope:	eq	version:	4.0.7	Trust: 1.6
vendor:	qnap	model:	ss-839	scope:	eq	version:	-	Trust: 1.0
vendor:	qnap	model:	ts-ec1679u-rp	scope:	eq	version:	-	Trust: 1.0
vendor:	qnap	model:	ts-469u	scope:	eq	version:	-	Trust: 1.0
vendor:	qnap	model:	ts-459u	scope:	eq	version:	-	Trust: 1.0
vendor:	qnap	model:	ss-839	scope:	-	version:	-	Trust: 0.8
vendor:	qnap	model:	ss-839	scope:	eq	version:	4.0.7 build 20140410	Trust: 0.8
vendor:	qnap	model:	ts-459u	scope:	-	version:	-	Trust: 0.8
vendor:	qnap	model:	ts-459u	scope:	eq	version:	4.0.7 build 20140410	Trust: 0.8
vendor:	qnap	model:	ts-469u	scope:	-	version:	-	Trust: 0.8
vendor:	qnap	model:	ts-469u	scope:	eq	version:	4.0.7 build 20140410	Trust: 0.8
vendor:	qnap	model:	ts-ec1679u-rp	scope:	-	version:	-	Trust: 0.8
vendor:	qnap	model:	ts-ec1679u-rp	scope:	eq	version:	4.0.7 build 20140410	Trust: 0.8

sources: JVNDB: JVNDB-2014-003949 // CNNVD: CNNVD-201408-386 // NVD: CVE-2014-5457

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-5457
value:	LOW
Trust: 1.0
NVD:	CVE-2014-5457
value:	LOW
Trust: 0.8
CNNVD:	CNNVD-201408-386
value:	LOW
Trust: 0.6
VULHUB:	VHN-73399
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2014-5457
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-73399
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-73399 // JVNDB: JVNDB-2014-003949 // CNNVD: CNNVD-201408-386 // NVD: CVE-2014-5457

PROBLEMTYPE DATA

problemtype:

CWE-264

Trust: 1.9

sources: VULHUB: VHN-73399 // JVNDB: JVNDB-2014-003949 // NVD: CVE-2014-5457

THREAT TYPE

local

Trust: 1.5

sources: BID: 68510 // CNNVD: CNNVD-201407-302 // CNNVD: CNNVD-201408-386

TYPE

permissions and access control

Trust: 1.2

sources: CNNVD: CNNVD-201407-302 // CNNVD: CNNVD-201408-386

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-003949

PATCH

title:	TS-459U-RP/SP	url:	http://www.qnap.com/jp/?lang=jp&sn=699&c=328&sc=600&t=607&n=4136	Trust: 0.8
title:	TS-469U-RP	url:	http://www.tekwind.co.jp/products/entry_9882.php	Trust: 0.8
title:	TS-EC1679U-RP	url:	http://www.qnap.com/jp/index.php?lang=jp&sn=699&c=328&sc=722&t=2337&n=10249	Trust: 0.8
title:	SS-839 Pro	url:	http://www.qnap.com/jp/?lang=jp&sn=699&c=328&sc=600&t=604&n=4257	Trust: 0.8

sources: JVNDB: JVNDB-2014-003949

EXTERNAL IDS

db:	NVD	id:	CVE-2014-5457	Trust: 2.8
db:	BID	id:	68510	Trust: 1.0
db:	JVNDB	id:	JVNDB-2014-003949	Trust: 0.8
db:	CNNVD	id:	CNNVD-201408-386	Trust: 0.7
db:	CNNVD	id:	CNNVD-201407-302	Trust: 0.6
db:	VULHUB	id:	VHN-73399	Trust: 0.1

sources: VULHUB: VHN-73399 // BID: 68510 // JVNDB: JVNDB-2014-003949 // CNNVD: CNNVD-201407-302 // CNNVD: CNNVD-201408-386 // NVD: CVE-2014-5457

REFERENCES

url:	http://seclists.org/fulldisclosure/2014/jul/57	Trust: 2.5
url:	http://seclists.org/fulldisclosure/2014/jul/61	Trust: 2.5
url:	http://seclists.org/fulldisclosure/2014/jul/58	Trust: 1.7
url:	http://seclists.org/fulldisclosure/2014/jul/59	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-5457	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-5457	Trust: 0.8
url:	http://www.securityfocus.com/bid/68510	Trust: 0.6

sources: VULHUB: VHN-73399 // JVNDB: JVNDB-2014-003949 // CNNVD: CNNVD-201407-302 // CNNVD: CNNVD-201408-386 // NVD: CVE-2014-5457

CREDITS

Melchior Limacher

Trust: 0.9

sources: BID: 68510 // CNNVD: CNNVD-201407-302

SOURCES

db:	VULHUB	id:	VHN-73399
db:	BID	id:	68510
db:	JVNDB	id:	JVNDB-2014-003949
db:	CNNVD	id:	CNNVD-201407-302
db:	CNNVD	id:	CNNVD-201408-386
db:	NVD	id:	CVE-2014-5457

LAST UPDATE DATE

2025-04-13T23:39:41.632000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-73399	date:	2014-08-26T00:00:00
db:	BID	id:	68510	date:	2014-08-27T00:23:00
db:	JVNDB	id:	JVNDB-2014-003949	date:	2014-08-27T00:00:00
db:	CNNVD	id:	CNNVD-201407-302	date:	2014-07-14T00:00:00
db:	CNNVD	id:	CNNVD-201408-386	date:	2014-08-26T00:00:00
db:	NVD	id:	CVE-2014-5457	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-73399	date:	2014-08-25T00:00:00
db:	BID	id:	68510	date:	2014-07-11T00:00:00
db:	JVNDB	id:	JVNDB-2014-003949	date:	2014-08-27T00:00:00
db:	CNNVD	id:	CNNVD-201407-302	date:	2014-07-14T00:00:00
db:	CNNVD	id:	CNNVD-201408-386	date:	2014-08-26T00:00:00
db:	NVD	id:	CVE-2014-5457	date:	2014-08-25T16:55:05.697