PT-2006-4444 · Netapp · Netapp Data Ontap

Published 2006-07-13 · Updated 2017-07-20 · CVE-2006-3569

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions 7.0x through 7.0.4P8D9 NetApp Data ONTAP versions 7.1x NetApp Data ONTAP versions 7.1.0.1x NetApp Data ONTAP versions 7.2RC1 NetApp Data ONTAP versions 7.2RC2 NetApp Data ONTAP versions 7.2RC3

Description The issue allows unauthorized users to gain access to privileged commands via unknown vectors, likely related to incorrect capabilities with the audit role.

Recommendations For NetApp Data ONTAP versions 7.0x through 7.0.4P8D9, consider restricting access to privileged commands until a fix is available. For NetApp Data ONTAP versions 7.1x, restrict the use of the audit role to minimize the risk of exploitation. For NetApp Data ONTAP versions 7.1.0.1x, limit access to sensitive areas of the system to prevent unauthorized access. For NetApp Data ONTAP versions 7.2RC1, 7.2RC2, and 7.2RC3, avoid using the affected capabilities with the audit role until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3569

Affected Products

Netapp Data Ontap

References · 8

• http://secunia.com/advisories/20984 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3569 · Security Note
• http://securityfocus.com/bid/18951 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27651 · Note
• http://www-1.ibm.com/support/docview.wss?rs=0&uid=ssg1S1002910 · Note
• http://now.netapp.com/NOW/products/vulnerability_0601 · Note
• http://osvdb.org/27134 · Note