Vulnerability Details CVE-2008-3349
Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.2%
CVSS Severity
CVSS v2 Score 10.0
References
- http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml
- http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml
- http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml
- http://www.kb.cert.org/vuls/id/329772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44265
- http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml
- http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml
- http://now.netapp.com/NOW/products/cpc/cpc0807-03.shtml
- http://www.kb.cert.org/vuls/id/329772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44265
Products affected by CVE-2008-3349
-
cpe:2.3:h:ibm:n_series_storage_server:*
-
cpe:2.3:h:netapp:fas900:*
-
cpe:2.3:o:netapp:data_ontap:-
-
cpe:2.3:o:netapp:data_ontap:7.3.7
-
cpe:2.3:o:netapp:data_ontap:8.0.4
-
cpe:2.3:o:netapp:data_ontap:8.0.5
-
cpe:2.3:o:netapp:data_ontap:8.1.3
-
cpe:2.3:o:netapp:data_ontap:8.1.4
-
cpe:2.3:o:netapp:data_ontap:8.2.1
-
cpe:2.3:o:netapp:data_ontap:8.2.2
-
cpe:2.3:o:netapp:data_ontap:8.2.4
-
cpe:2.3:o:netapp:data_ontap:8.2.5