Micromuse Netcool/Neusecure NS Account Password Disclosure Vulnerability
BID:16693
Info
Micromuse Netcool/Neusecure NS Account Password Disclosure Vulnerability
| Bugtraq ID: | 16693 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 16 2006 12:00AM |
| Updated: | Feb 17 2006 06:42PM |
| Credit: | Discovered by Dimitry Snezhkov. |
| Vulnerable: |
Micromuse Netcool/Neusecure 3.0.236 -1 |
| Not Vulnerable: | |
Discussion
Micromuse Netcool/Neusecure NS Account Password Disclosure Vulnerability
Micromuse Netcool/Neusecure is prone to an NS account password-disclosure vulnerability. Gaining access to this password could allow an attacker to fully compromise the backend MySQL database.
Neusecure 3.0.236-1 was reported vulnerable. Other versions may also be affected.
Micromuse Netcool/Neusecure is prone to an NS account password-disclosure vulnerability. Gaining access to this password could allow an attacker to fully compromise the backend MySQL database.
Neusecure 3.0.236-1 was reported vulnerable. Other versions may also be affected.
Exploit / POC
Micromuse Netcool/Neusecure NS Account Password Disclosure Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Micromuse Netcool/Neusecure NS Account Password Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
Micromuse Netcool/Neusecure NS Account Password Disclosure Vulnerability
References:
References:
- Home Page (Micromuse)
- Netcool/Neusecure (Micromuse)
- Password disclosure and remote access in Netcool/NeuSecure Security information (D.Snezhkov