CVE-2007-6081 - AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs

Back Back to CVE browser

HIGH

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs

Published Nov 21, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.36%

Description

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (5)

http://forums.adventnet.com/viewtopic.php?t=247521
x_refsource_CONFIRM
http://osvdb.org/42423
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/27833
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/26304
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-6050
Advisory

Link	Providers	Tags
http://forums.adventnet.com/viewtopic.php?t=247521		x_refsource_CONFIRM
http://osvdb.org/42423		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/27833		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/26304		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-6050		Advisory