Executive Summary

Name CVE-2010-2465 First vendor Publication 2010-06-25
Vendor Cve Last vendor Modification 2010-07-13

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2465

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-264 Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

Hardware 1
Hardware 1
Hardware 3
Hardware 1

Open Source Vulnerability Database (OSVDB)

Id Description
65757 S2 NetBox Unspecified HTTP Request Directory Access Restriction Bypass

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/41134
CERT-VN http://www.kb.cert.org/vuls/id/251133
CONFIRM http://www.kb.cert.org/vuls/id/MAPG-83TQL8
MISC http://blip.tv/file/3414004
OSVDB http://osvdb.org/65757
SECUNIA http://secunia.com/advisories/40374

Alert History

If you want to see full details history, please login or register.
Date Informations
2021-05-04 12:11:46
  • Multiple Updates
2021-04-22 01:12:20
  • Multiple Updates
2020-05-23 00:26:01
  • Multiple Updates
2016-06-28 18:14:53
  • Multiple Updates
2016-04-26 19:55:26
  • Multiple Updates
2013-05-10 23:28:00
  • Multiple Updates