PT-2002-2400 · Bindview · Bindview Netinventory

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1676

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BindView NetInventory version 1.0

Description The issue allows local users to read sensitive information, such as passwords, by manipulating the HOSTCFG. NI file and forcing an audit. This process rewrites the HOSTCFG. NI to HOSTCFG.INI, storing the passwords in cleartext until the audit is complete.

Recommendations For BindView NetInventory version 1.0, consider restricting access to the HOSTCFG. NI file and avoid forcing audits unless necessary, to minimize the risk of password exposure. Additionally, monitor the system for any unauthorized access or modifications to the HOSTCFG. NI file.

Correção

Identificadores relacionados

CVE-2002-1676

Produtos afetados

Bindview Netinventory

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1676 · Nota de Segurança
• http://securityfocus.com/bid/3957 · Correção
• http://online.securityfocus.com/archive/1/252293 · Nota
• http://online.securityfocus.com/archive/1/256056 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7992 · Nota