PT-2006-2300 · Symantec+1 · Symantec Ghost Solution Suite+2

Published 2006-03-19 · Updated 2011-03-08 · CVE-2006-1284

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solutions Suite (SGSS) version 1.0 Symantec Ghost version 8.0 Symantec Ghost version 8.2

Description The issue concerns the installation of SQLAnywhere in Symantec Ghost, which includes a default administrator login account and password. This allows local users to gain privileges or modify tasks.

Recommendations For Symantec Ghost Solutions Suite (SGSS) version 1.0, change the default administrator login account and password to prevent unauthorized access. For Symantec Ghost version 8.0, update the default administrator login account and password to secure the system. For Symantec Ghost version 8.2, modify the default administrator login account and password to prevent privilege escalation.

Fix

Related Identifiers

CVE-2006-1284

Affected Products

Sqlanywhere

Symantec Ghost

Symantec Ghost Solution Suite

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-1284 · Security Note
• http://secunia.com/advisories/19171 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0870 · Note
• http://securityfocus.com/bid/17018 · Note
• http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html · Note
• http://securitytracker.com/id?1015733 · Note