PT-2006-4597 · Cisco+1 · Cs-Mars+1

Published 2006-07-19 · Updated 2017-07-20 · CVE-2006-3732

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Security Monitoring, Analysis and Response System (CS-MARS) versions prior to 4.2.1

Description The issue concerns default accounts and passwords in the Oracle database shipped with the software, allowing attackers to obtain sensitive information.

Recommendations For versions prior to 4.2.1, update to version 4.2.1 or later to address the issue. As a temporary workaround, consider changing the default passwords of the Oracle database accounts to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-3732

Affected Products

Cs-Mars

Oracle Database

References · 8

• http://securitytracker.com/id?1016537 · Patch
• http://securityfocus.com/bid/19071 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3732 · Security Note
• http://secunia.com/advisories/21118 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27810 · Note
• http://securityfocus.com/bid/19073 · Note
• http://vupen.com/english/advisories/2006/2887 · Note