CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2008-3349
https://notcve.org/view.php?id=CVE-2008-3349
Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160. Múltiples vulnerabilidades sin especificar en NetApp Data ONTAP, usados sobre NetApp y plataformas IBM eServer, permite a atacantes remotos ejecutar comandos de su elección que pueden provocar una denegación de servicio (caída de sistema), u obtener información sensible. Probablemente relacionado con un acceso insuficiente sobre las peticiones HTTP. NOTA: esta vulnerabilidad puede solaparse con CVE-2008-3160. • http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml http://www.kb.cert.org/vuls/id/329772 https://exchange.xforce.ibmcloud.com/vulnerabilities/44265 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0CVE-2008-3160
https://notcve.org/view.php?id=CVE-2008-3160
Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors. Múltiples vulnerabilidades no especificadas en IBM Data ONTAP 7.1 anterior a 7.1.3, como se utiliza en IBM System Storage N series Filer e IBM System Storage N series Gateway, tienen un impacto y vectores de ataque desconocidos • http://secunia.com/advisories/30931 http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002385 http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002386 http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372 http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002373 http://www-1.ibm.com/support/docview.wss? •
CVSS: 4.6EPSS: 0%CPEs: 7EXPL: 0CVE-2006-3569
https://notcve.org/view.php?id=CVE-2006-3569
Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with the audit role. Vulnerabilidad no especificada en NetApp Data ONTAP 7.0x hasta la 7.0.4P8D9, 7.1x, 7.1.0.1x, y 7.2RC1, RC2, y RC3, tal y como se usan en IBM N series Filers y otros productos, permite a usuarios no autorizados ganar privilegios de acceso a comandos privilegiados a través de vectores desconocidos, probablemente relacionados con capacidades incorrectas con la función de auditoria. • http://now.netapp.com/NOW/products/vulnerability_0601 http://secunia.com/advisories/20984 http://www-1.ibm.com/support/docview.wss?rs=0&uid=ssg1S1002910 http://www.osvdb.org/27134 http://www.securityfocus.com/bid/18951 http://www.vupen.com/english/advisories/2006/2761 https://exchange.xforce.ibmcloud.com/vulnerabilities/27651 •