CVE-2006-2614 : Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (

Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.

Published 2006-05-26 01:06:00

Updated 2017-07-20 01:31:38

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-2614

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-2614

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2006-2614

SUN » N1 System Manager » Version: 1.1
cpe:2.3:a:sun:n1_system_manager:1.1:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2006-2614

Exploit prediction scoring system (EPSS) score for CVE-2006-2614

CVSS scores for CVE-2006-2614

References for CVE-2006-2614

Products affected by CVE-2006-2614