NuytsTech Security

CVE-2006-3878

by ·

Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql.

Date published : 2006-07-26

http://www.securityfocus.com/bid/19126

http://www.securityfocus.com/archive/1/441024/100/0/threaded

Tags: