CVE-2006-2539: Low severity Sybase EAServer vulnerability
Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2539?
CVE-2006-2539 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2006-2539?
To fix CVE-2006-2539, users should upgrade to a version of Sybase EAServer that addresses the password protection issue.
What versions of Sybase EAServer are affected by CVE-2006-2539?
CVE-2006-2539 affects Sybase EAServer versions 5.0, 5.2, and 5.3 across various platforms.
What type of vulnerability is CVE-2006-2539?
CVE-2006-2539 is an information disclosure vulnerability that allows local users to access cleartext passwords.
Can CVE-2006-2539 be exploited remotely?
CVE-2006-2539 cannot be exploited remotely as it requires local access to the affected system.