First published: Sun Mar 19 2006(Updated: )
SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Ghost Solution Suite | =1.0 | |
Ghost | =8.0 | |
Ghost | =8.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-1285 is considered a moderate severity vulnerability due to the potential for local users to access and modify sensitive data.
To fix CVE-2006-1285, it is recommended to upgrade to a newer version of Symantec Ghost Solutions Suite that addresses this vulnerability.
CVE-2006-1285 affects Symantec Ghost versions 8.0 and 8.2, as well as Ghost Solutions Suite 1.0.
The implications of CVE-2006-1285 include the risk of unauthorized access and modification of database information by local users.
There are no publicly disclosed exploits specifically targeting CVE-2006-1285, but the vulnerability itself poses a risk if not mitigated.