Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-1285

Overview

Vulnerability Score 3.2 3.2
CVE Id CVE-2006-1285
Last Modified 07 Mar 2011 09:32:42
Published 19 Mar 2006 06:02:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector LOCAL
Access Complexity LOW
Authentication SINGLE_INSTANCE

CVE-2006-1285

Summary

SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information.

Vulnerable Systems

Application

  • Symantec Ghost Solutions Suite 1.0

  • Symantec Norton Ghost 8.0

  • Symantec Norton Ghost 8.2


References

VUPEN - ADV-2006-0870

CONFIRM - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html

SECUNIA - 19171

BID - 17019

SECTRACK - 1015733


Last Updated: 27 May 2016 10:42:00