Vulnerabilities > CVE-2006-2614 - Local Password Disclosure vulnerability in SUN N1 System Manager 1.1
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Nessus
NASL family Solaris Local Security Checks NASL id SOLARIS10_X86_121161-01.NASL description System Manager 1.1: Common Core Patch. Date this patch was last updated by Sun : May/15/06 last seen 2020-06-01 modified 2020-06-02 plugin id 107875 published 2018-03-12 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/107875 title Solaris 10 (x86) : 121161-01 code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text in this plugin was # extracted from the Oracle SunOS Patch Updates. # include("compat.inc"); if (description) { script_id(107875); script_version("1.4"); script_cvs_date("Date: 2019/10/25 13:36:23"); script_cve_id("CVE-2006-2614"); script_name(english:"Solaris 10 (x86) : 121161-01"); script_summary(english:"Check for patch 121161-01"); script_set_attribute( attribute:"synopsis", value:"The remote host is missing Sun Security Patch number 121161-01" ); script_set_attribute( attribute:"description", value: "System Manager 1.1: Common Core Patch. Date this patch was last updated by Sun : May/15/06" ); script_set_attribute( attribute:"see_also", value:"https://getupdates.oracle.com/readme/121161-01" ); script_set_attribute(attribute:"solution", value:"Install patch 121161-01"); script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:solaris:10:121161"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:solaris:10"); script_set_attribute(attribute:"patch_publication_date", value:"2006/05/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/12"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Solaris Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("solaris.inc"); showrev = get_kb_item("Host/Solaris/showrev"); if (empty_or_null(showrev)) audit(AUDIT_OS_NOT, "Solaris"); os_ver = pregmatch(pattern:"Release: (\d+.(\d+))", string:showrev); if (empty_or_null(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Solaris"); full_ver = os_ver[1]; os_level = os_ver[2]; if (full_ver != "5.10") audit(AUDIT_OS_NOT, "Solaris 10", "Solaris " + os_level); package_arch = pregmatch(pattern:"Application architecture: (\w+)", string:showrev); if (empty_or_null(package_arch)) audit(AUDIT_UNKNOWN_ARCH); package_arch = package_arch[1]; if (package_arch != "i386") audit(AUDIT_ARCH_NOT, "i386", package_arch); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (solaris_check_patch(release:"5.10_x86", arch:"i386", patch:"121161-01", obsoleted_by:"", package:"SUNWn1hss-servicescr", version:"1.1,REV=20050824093517") < 0) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : solaris_get_report() ); } else { patch_fix = solaris_patch_fix_get(); if (!empty_or_null(patch_fix)) audit(AUDIT_PATCH_INSTALLED, patch_fix, "Solaris 10"); tested = solaris_pkg_tests_get(); if (!empty_or_null(tested)) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); audit(AUDIT_PACKAGE_NOT_INSTALLED, "SUNWn1hss-servicescr"); }
NASL family Solaris Local Security Checks NASL id SOLARIS10_X86_121161.NASL description System Manager 1.1: Common Core Patch. Date this patch was last updated by Sun : May/15/06 This plugin has been deprecated and either replaced with individual 121161 patch-revision plugins, or deemed non-security related. last seen 2019-02-21 modified 2018-07-30 plugin id 22999 published 2006-11-06 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=22999 title Solaris 10 (x86) : 121161-01 (deprecated) NASL family Solaris Local Security Checks NASL id SOLARIS10_121161-01.NASL description System Manager 1.1: Common Core Patch. Date this patch was last updated by Sun : May/15/06 last seen 2020-06-01 modified 2020-06-02 plugin id 107374 published 2018-03-12 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/107374 title Solaris 10 (sparc) : 121161-01 NASL family Solaris Local Security Checks NASL id SOLARIS10_121161.NASL description System Manager 1.1: Common Core Patch. Date this patch was last updated by Sun : May/15/06 This plugin has been deprecated and either replaced with individual 121161 patch-revision plugins, or deemed non-security related. last seen 2019-02-21 modified 2018-07-30 plugin id 22969 published 2006-11-06 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=22969 title Solaris 10 (sparc) : 121161-01 (deprecated)