Lucene search
HistoryMar 19, 2006 - 11:02 p.m.
CVE-2006-1285
cve-2006-1285
sqlanywhere
symantec ghost
sgss
database security
local user access
3.2 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:P/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.7%
SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information.
Affected configurations
Node
symantecghost_solutions_suiteMatch1.0
ORsymantecnorton_ghostMatch8.0
ORsymantecnorton_ghostMatch8.2
Related
prion
prion
Information disclosure
2006-03-19 23:02:00
cvelist
cvelist
CVE-2006-1285
2006-03-19 23:00:00
nvd
nvd
CVE-2006-1285
2006-03-19 23:02:00
symantec
symantec
Symantec Ghost: Local access vulnerabilities in Database
2006-03-07 08:00:00
3.2 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:P/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.7%
Related for CVE-2006-1285