Test ID:	1.3.6.1.4.1.25623.1.0.140219
Category:	Web application abuses
Title:	QNAP QTS < 4.2.4 Build 20170313 Multiple Vulnerabilities - Version Check
Summary:	QNAP QTS is prone to multiple vulnerabilities.
Description:	Summary: QNAP QTS is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2017-5227: Local users cat obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file. - SQL injection, command injection, heap overflow, cross-site scripting, and three stack overflow vulnerabilities - CVE-2017-6361, CVE-2017-6360, CVE-2017-6359: Command injection - Access control vulnerability that would incorrectly restrict authorized user access to resources. - Two stack overflow vulnerabilities that could be exploited to execute malicious codes reported - Clickjacking vulnerability that could be exploited to trick users into clicking malicious links - Missing HttpOnly Flag From Cookie vulnerability that could be exploited to steal session cookies. - SNMP Agent Default Community Name vulnerability that could be exploited to gain access to the system using the default community string. - NMP credentials in clear text vulnerability that could be exploited to steal user credentials. - LDAP anonymous directory access vulnerability that could be exploited to allow anonymous connections. Affected Software/OS: QNAP QTS version prior to 4.2.4 Build 20170313. Solution: Update to version 4.2.4 Build 20170313 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5227 BugTraq ID: 97056 http://www.securityfocus.com/bid/97056 BugTraq ID: 97072 http://www.securityfocus.com/bid/97072 https://www.exploit-db.com/exploits/41745/ http://www.ush.it/team/ush/hack-qnap/qnap.txt http://www.securitytracker.com/id/1038091 Common Vulnerability Exposure (CVE) ID: CVE-2017-6361 BugTraq ID: 97059 http://www.securityfocus.com/bid/97059 https://www.exploit-db.com/exploits/41842/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6360 Common Vulnerability Exposure (CVE) ID: CVE-2017-6359
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.