CVE:CVE-2014-5457
CNNVD:CNNVD-201408-386
QNAP TS-469U、TS-459U、TS-EC1679U-RP和SS-839都是威联通（QNAP Systems）公司的NAS储存服务器。
使用4.0.7 Build 20140410版本固件的QNAP Systems QNAP TS-469U、TS-459U、TS-EC1679U-RP、SS-839中存在安全漏洞，该漏洞源于程序对/etc/config/shadow URL使用全局可读权限。本地攻击者可通过读取密码利用该漏洞获取用户名和密码散列。
solution:Upgrade qnap ts-469u_firmware to a higher version than 4.0.7,and avoid the version 4.0.7; Upgrade qnap ts-469u to a higher version than -; Upgrade qnap ts-ec1679u-rp_firmware to a higher version than 4.0.7,and avoid the version 4.0.7; Upgrade qnap ts-ec1679u-rp to a higher version than -; Upgrade qnap ts-459u_firmware to a higher version than 4.0.7,and avoid the version 4.0.7; Upgrade qnap ts-459u to a higher version than -; Upgrade qnap ss-839_firmware to a higher version than 4.0.7,and avoid the version 4.0.7; Upgrade qnap ss-839 to a higher version than -