|
| TC: | 12061 | |
| Description: | SQLBase Database server is a very popular database server which sees widespread use throughout the world. A vulnerability exists in the default installation of the SQLBase database which creates a default user/password pairing. This default configuration can easily be discovered and accessed remotely by an attacker and, upon discovery exploited to the total compromise of the target system. | |
| TC Impact: | Gather Info | |
| Service: | SQLBase |
| Vulnerability Publication: | N.A. | |
| Advisory Copyright: | N.A. | |
| Summary: | A remote attacker can cause a total compromise of your SQLBase database server. | |
| Risk: | High | |
| CVSS 2.0 metrics: | Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial | |
| CVSS 2.0 Base Score: | 7.5 |
| Vulnerability Impact: |
Gain Root |
|---|
| Host Impact: | That a remote attacker might totally compromise your database server. | |
| Nature of Remediation: | Change the configuration. |
| Step required to fix the reported vulnerability: | |
***** Solution type: Update Configuration ***** Change the sysadmin password. |
| References: | ||
| * MISC: http://www.unify.com/Products/Data_Management/SQLBase/ |
| CVE Link: |
GENERIC-MAP-NOMATCH |
 |
|---|
| Glossary: |
Password SQL TCP |
|---|