CVE-2006-1211 - IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions

Back Back to CVE browser

HIGH

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions

Published Mar 14, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.44%

Description

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/archive/1/427155/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1215
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25270
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/archive/1/427155/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1215		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25270		vdb-entryx_refsource_XF