Vulnerability CVE-2006-1829
Published: 2006-04-19   Modified: 2012-02-12

Description:
EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles.

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4/10
2.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Sybase -> Easerver 

 References:
http://www.vupen.com/english/advisories/2006/1344
http://www.sybase.com/detail?id=1040117
http://www.securityfocus.com/bid/17508
http://securitytracker.com/id?1015913
http://secunia.com/advisories/19605
http://xforce.iss.net/xforce/xfdb/25777
Copyright 2024, cxsecurity.com

 

Back to Top