CVE-2006-0531

HIGH

Description

Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool.

References

http://secunia.com/advisories/18699

http://securitytracker.com/id?1015567

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102140-1

http://www.securityfocus.com/bid/16474

http://www.vupen.com/english/advisories/2006/0430

https://exchange.xforce.ibmcloud.com/vulnerabilities/24423

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A360

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A755

Details

Source: MITRE

Published: 2006-02-04

Updated: 2017-10-11

Risk Information

CVSS v2.0

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:sun:java_system_access_manager:7.0:*:linux:*:*:*:*:*

cpe:2.3:a:sun:java_system_access_manager:7.0:*:solaris_s:*:*:*:*:*

cpe:2.3:a:sun:java_system_access_manager:7.0:*:solaris_x:*:*:*:*:*

Tenable Plugins

View all (7 total)

IDNameProductFamilySeverity
107871Solaris 10 (x86) : 120955-12NessusSolaris Local Security Checks
critical
107369Solaris 10 (sparc) : 120954-12NessusSolaris Local Security Checks
critical
38126Solaris 10 (x86) : 120955-12 (deprecated)NessusSolaris Local Security Checks
critical
38005Solaris 9 (x86) : 120955-12NessusSolaris Local Security Checks
critical
37533Solaris 9 (sparc) : 120954-12NessusSolaris Local Security Checks
critical
37271Solaris 8 (sparc) : 120954-12NessusSolaris Local Security Checks
critical
36756Solaris 10 (sparc) : 120954-12 (deprecated)NessusSolaris Local Security Checks
critical