First published: Sun Mar 19 2006(Updated: )
The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password, which allows local users to gain privileges or modify tasks.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Ghost Solution Suite | =1.0 | |
Ghost | =8.0 | |
Ghost | =8.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-1284 has been classified as a high severity vulnerability due to the presence of a default administrator login that can be exploited.
To fix CVE-2006-1284, change the default administrator login credentials used in SQLAnywhere during the installation of Symantec Ghost.
CVE-2006-1284 affects Symantec Ghost Solutions Suite 1.0, Norton Ghost 8.0, and Norton Ghost 8.2.
The impact of CVE-2006-1284 allows unauthorized local users to gain elevated privileges and potentially modify critical tasks within the software.
The primary workaround for CVE-2006-1284 is to implement proper credential management by disabling or changing the default admin account.