CVE-2006-2539
First published: Mon May 22 2006(Updated: )
Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Sybase EAServer | =5.2 | |
| SAP Sybase EAServer | =5.0 | |
| SAP Sybase EAServer | =5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-2539?
CVE-2006-2539 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2006-2539?
To fix CVE-2006-2539, users should upgrade to a version of Sybase EAServer that addresses the password protection issue.
What versions of Sybase EAServer are affected by CVE-2006-2539?
CVE-2006-2539 affects Sybase EAServer versions 5.0, 5.2, and 5.3 across various platforms.
What type of vulnerability is CVE-2006-2539?
CVE-2006-2539 is an information disclosure vulnerability that allows local users to access cleartext passwords.
Can CVE-2006-2539 be exploited remotely?
CVE-2006-2539 cannot be exploited remotely as it requires local access to the affected system.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sybase
- canonical/sap sybase easerver
- version/sap sybase easerver/5.2
- version/sap sybase easerver/5.0
- version/sap sybase easerver/5.3