EUVD-2006-3872

Malware in sbrugna...

CVE-2006-3878

Opsware Network Automation System NAS 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql...

CVE-2006-3878

CVE-2006-3878 concerns Opsware Network Automation System (NAS) 6.0. The issue arises because NAS installs /etc/init.d/mysql with insecure permissions, enabling local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql. The root cause is imp...

CVE-2006-3878

Opsware Network Automation System NAS 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql...

Opsware Network Automation System weak permissions

/etc/init.d/mysqll init script contains MySQL 'root' account password in cleartext...

Opsware NAS 6.0 reveals MySQL 'root' password

The Opsware Network Automation System NAS version 6.0 installation places an 'init' style startup script in /etc/init.d/mysqll and places the 'root' password that you choose for the MySQL MAX database during installation. The permissions on this small shell script are world readable, allowing any...