CVE-2014-5457

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password...

CVE-2014-5457

CVE-2014-5457 affects QNAP TS-469U (firmware 4.0.7 Build 20140410) and related models TS-459U, TS-EC1679U-RP, SS-839. The root cause is world-readable permissions on /etc/config/shadow, enabling local users to read usernames and password hashes. This disclosure is documented across NVD/Red Hat/CV...