ID CVE-2007-2150
Summary BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command, a variant of CVE-1999-0017.
References
Vulnerable Configurations
  • cpe:2.3:h:bluearc:titan:*:*:*:*:*:*:*:*
    cpe:2.3:h:bluearc:titan:*:*:*:*:*:*:*:*
  • cpe:2.3:h:bluearc:titan:2100:*:*:*:*:*:*:*
    cpe:2.3:h:bluearc:titan:2100:*:*:*:*:*:*:*
  • cpe:2.3:h:bluearc:titan:2200:*:*:*:*:*:*:*
    cpe:2.3:h:bluearc:titan:2200:*:*:*:*:*:*:*
  • cpe:2.3:h:bluearc:titan:2500:*:*:*:*:*:*:*
    cpe:2.3:h:bluearc:titan:2500:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 16-10-2018 - 16:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE COMPLETE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:C/A:N
refmap via4
bid 23540
bugtraq 20070417 BlueArc Firmware 4.2.944b FTP bounce
osvdb 35414
xf bluearc-port-traffic-hijacking(33721)
Last major update 16-10-2018 - 16:42
Published 19-04-2007 - 10:19
Last modified 16-10-2018 - 16:42
Back to Top