PT-2006-4597 · Cisco+1 · Cs-Mars+1

Publicado 2006-07-19 · Atualizado 2017-07-20 · CVE-2006-3732

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Security Monitoring, Analysis and Response System (CS-MARS) versions prior to 4.2.1

Description The issue concerns default accounts and passwords in the Oracle database shipped with the software, allowing attackers to obtain sensitive information.

Recommendations For versions prior to 4.2.1, update to version 4.2.1 or later to address the issue. As a temporary workaround, consider changing the default passwords of the Oracle database accounts to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-3732

Produtos afetados

Cs-Mars

Oracle Database

Referências · 8

• http://cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml · Correção, Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27810 · Nota
• http://securitytracker.com/id?1016537 · Correção
• http://securityfocus.com/bid/19071 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-3732 · Nota de Segurança
• http://securityfocus.com/bid/19073 · Nota
• http://vupen.com/english/advisories/2006/2887 · Nota
• http://secunia.com/advisories/21118 · Aviso do Fabricante