PT-2006-4444 · Netapp · Netapp Data Ontap

Publicado 2006-07-13 · Atualizado 2017-07-20 · CVE-2006-3569

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions 7.0x through 7.0.4P8D9 NetApp Data ONTAP versions 7.1x NetApp Data ONTAP versions 7.1.0.1x NetApp Data ONTAP versions 7.2RC1 NetApp Data ONTAP versions 7.2RC2 NetApp Data ONTAP versions 7.2RC3

Description The issue allows unauthorized users to gain access to privileged commands via unknown vectors, likely related to incorrect capabilities with the audit role.

Recommendations For NetApp Data ONTAP versions 7.0x through 7.0.4P8D9, consider restricting access to privileged commands until a fix is available. For NetApp Data ONTAP versions 7.1x, restrict the use of the audit role to minimize the risk of exploitation. For NetApp Data ONTAP versions 7.1.0.1x, limit access to sensitive areas of the system to prevent unauthorized access. For NetApp Data ONTAP versions 7.2RC1, 7.2RC2, and 7.2RC3, avoid using the affected capabilities with the audit role until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3569

Produtos afetados

Netapp Data Ontap

Referências · 8

• http://securityfocus.com/bid/18951 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27651 · Nota
• http://www-1.ibm.com/support/docview.wss?rs=0&uid=ssg1S1002910 · Nota
• http://secunia.com/advisories/20984 · Aviso do Fabricante
• http://now.netapp.com/NOW/products/vulnerability_0601 · Nota
• http://vupen.com/english/advisories/2006/2761 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3569 · Nota de Segurança
• http://osvdb.org/27134 · Nota