PT-2005-4127 · Symantec · Symantec Discovery

Publicado 2005-10-27 · Atualizado 2013-07-07 · CVE-2005-3316

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Discovery versions 4.5.x through 6.0

Description The issue arises from the installation process of Symantec Discovery, which creates the DiscoveryWeb and DiscoveryRO database accounts with null passwords. This could potentially allow attackers to gain privileges or disrupt the operation of Discovery by setting another password.

Recommendations For Symantec Discovery versions 4.5.x through 6.0, consider setting strong passwords for the DiscoveryWeb and DiscoveryRO database accounts as soon as possible after installation to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2005-3316

Produtos afetados

Symantec Discovery

Referências · 6

• http://secunia.com/advisories/17302 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2005.10.24.html · Nota
• http://securitytracker.com/id?1015097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3316 · Nota de Segurança
• http://securityreason.com/securityalert/112 · Nota
• http://securityfocus.com/bid/15188 · Nota