PT-2006-5006 · Novell · Edirectory+1

Publicado 2006-08-17 · Atualizado 2008-09-05 · CVE-2006-4186

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell eDirectory version 8.7.3.8

Description The issue concerns the iManager in eMBoxClient.jar, which writes passwords in plaintext to a log file. This allows local users to obtain passwords by reading the file.

Recommendations For Novell eDirectory version 8.7.3.8, consider restricting access to the log file to minimize the risk of password exposure. As a temporary workaround, avoid using the iManager in eMBoxClient.jar until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-4186

Produtos afetados

Edirectory

Imanager

Referências · 6

• http://securitytracker.com/id?1016695 · Correção
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm · Correção
• http://securityfocus.com/bid/19499 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4186 · Nota de Segurança
• http://osvdb.org/28370 · Nota
• http://secunia.com/advisories/21496 · Aviso do Fabricante