CVE Vulnerabilities

CVE-2005-3316

Published: Oct 27, 2005 | Modified: Jul 07, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.

Affected Software

Name Vendor Start Version End Version
Discovery Symantec 6.0 6.0
On_command_discovery Symantec standard_4.5 standard_4.5
On_command_discovery Symantec web_4.5 web_4.5

References