PT-2009-4786 · Microsoft+1 · Windows+2

Tim Brown · Publicado 2009-07-07 · Atualizado 2018-10-10 · CVE-2009-2357

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TekRADIUS version 3.0

Description The default configuration of TekRADIUS uses the sa account to communicate with Microsoft SQL Server, making it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.

Recommendations For TekRADIUS version 3.0, consider changing the default configuration to use a less privileged account for communication with Microsoft SQL Server to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2009-2357

Produtos afetados

Sql Server

Tekradius

Windows

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2009-2357 · Nota de Segurança
• http://vupen.com/english/advisories/2009/1816 · Nota
• http://nth-dimension.org.uk/utils/get.php?downloadsid=56 · Nota
• http://securityfocus.com/archive/1/504740/100/0/threaded · Nota