Vulnerabilities > CVE-2006-3878 - Information Disclosure vulnerability in Opsware Network Automation System 6.0

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
opsware
NVD
Published: 2006-07-27
Updated: 2018-10-17

Summary

Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql.

Vulnerable Configurations

Part Description Count
Application
Opsware
1

References