CVE-2006-2614
Last modified
CVE-2006-2614 is a vulnerability of currently unknown severity. Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sun | N1 System Manager | 1.1 |
References
- http://secunia.com/advisories/20127Patch, Vendor Advisory
- http://secunia.com/advisories/20127Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2614?
How severe is CVE-2006-2614?
How do I fix CVE-2006-2614?
Are you affected by CVE-2006-2614?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
