PT-2005-4091 · Hsqldb+1 · Hsqldb+1

Andrew Christensen · Published 2005-10-23 · Updated 2018-10-19 · CVE-2005-3280

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Paros version 3.2.5

Description The issue allows remote attackers to gain privileges due to the use of a default password for the sa account in the underlying HSQLDB database and lack of access restriction to the local machine.

Recommendations For Paros version 3.2.5, change the default password for the sa account in the HSQLDB database and restrict access to the local machine to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2005-3280

Affected Products

Hsqldb

Paros

References · 8

• 🔥 http://zone-h.com/en/advisories/read/id=8286 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3280 · Security Note
• http://secunia.com/advisories/17089 · Vendor Advisory
• http://securityfocus.com/bid/15141 · Patch
• http://gentoo.org/security/en/glsa/glsa-200601-15.xml · Vendor Advisory
• http://securityfocus.com/archive/1/423446/100/0/threaded · Note
• http://secunia.com/advisories/18626 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22557 · Note