PT-2006-4729 · Mysql Server+1 · Mysql Server+1

Michael Freeman · Publicado 2006-07-27 · Atualizado 2018-10-17 · CVE-2006-3878

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Opsware Network Automation System (NAS) version 6.0

Description The issue concerns insecure permissions set by Opsware Network Automation System (NAS) 6.0 on the /etc/init.d/mysql file. This allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql.

Recommendations For Opsware Network Automation System (NAS) version 6.0, consider changing the permissions of the /etc/init.d/mysql file to secure it and prevent unauthorized access. As a temporary workaround, restrict access to the /etc/init.d/mysql file until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2006-3878

Produtos afetados

Mysql Server

Opsware Network Automation System

Referências · 9

• http://securityfocus.com/archive/1/444223/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27995 · Nota
• http://secunia.com/advisories/21192 · Nota
• http://securitytracker.com/id?1016566 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3878 · Nota de Segurança
• http://securityreason.com/securityalert/1289 · Nota
• http://securityfocus.com/bid/19126 · Nota
• http://securityfocus.com/archive/1/441024/100/0/threaded · Nota
• http://securityfocus.com/archive/1/441296/100/0/threaded · Nota