PT-2005-4091 · Hsqldb+1 · Hsqldb+1

Andrew Christensen · Publicado 2005-10-23 · Atualizado 2018-10-19 · CVE-2005-3280

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Paros version 3.2.5

Description The issue allows remote attackers to gain privileges due to the use of a default password for the sa account in the underlying HSQLDB database and lack of access restriction to the local machine.

Recommendations For Paros version 3.2.5, change the default password for the sa account in the HSQLDB database and restrict access to the local machine to prevent unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2005-3280

Produtos afetados

Hsqldb

Paros

Referências · 8

• 🔥 http://zone-h.com/en/advisories/read/id=8286 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3280 · Nota de Segurança
• http://secunia.com/advisories/17089 · Aviso do Fabricante
• http://securityfocus.com/archive/1/423446/100/0/threaded · Nota
• http://secunia.com/advisories/18626 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22557 · Nota
• http://securityfocus.com/bid/15141 · Correção
• http://gentoo.org/security/en/glsa/glsa-200601-15.xml · Aviso do Fabricante