Search
Find a vulnerability
Search criteria
2 vulnerabilities by auditwizard
CVE-2006-4642 (GCVE-0-2006-4642)
Vulnerability from nvd – Published: 2006-09-08 21:00 – Updated: 2024-08-07 19:14
VLAI
EPSS
VEX
Summary
AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/445220/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/21773 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/3498 | vdb-entryx_refsource_VUPEN |
| http://securityreason.com/securityalert/1525 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1016795 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/19860 | vdb-entryx_refsource_BID |
Date Public
2006-09-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:14:47.781Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "auditwizard-remoteaudit-password-disclosure(28743)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743"
},
{
"name": "20060905 AuditWizard 6.3.2 gives away administrator password",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/445220/100/0/threaded"
},
{
"name": "21773",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21773"
},
{
"name": "ADV-2006-3498",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/3498"
},
{
"name": "1525",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1525"
},
{
"name": "1016795",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016795"
},
{
"name": "19860",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19860"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-09-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "AuditWizard 6.3.2, when using \"Remote Audit,\" logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "auditwizard-remoteaudit-password-disclosure(28743)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743"
},
{
"name": "20060905 AuditWizard 6.3.2 gives away administrator password",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/445220/100/0/threaded"
},
{
"name": "21773",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21773"
},
{
"name": "ADV-2006-3498",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/3498"
},
{
"name": "1525",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1525"
},
{
"name": "1016795",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016795"
},
{
"name": "19860",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19860"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-4642",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "AuditWizard 6.3.2, when using \"Remote Audit,\" logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "auditwizard-remoteaudit-password-disclosure(28743)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743"
},
{
"name": "20060905 AuditWizard 6.3.2 gives away administrator password",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/445220/100/0/threaded"
},
{
"name": "21773",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21773"
},
{
"name": "ADV-2006-3498",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/3498"
},
{
"name": "1525",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1525"
},
{
"name": "1016795",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016795"
},
{
"name": "19860",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19860"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-4642",
"datePublished": "2006-09-08T21:00:00.000Z",
"dateReserved": "2006-09-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:14:47.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-4642 (GCVE-0-2006-4642)
Vulnerability from cvelistv5 – Published: 2006-09-08 21:00 – Updated: 2024-08-07 19:14
VLAI
EPSS
VEX
Summary
AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/445220/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/21773 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/3498 | vdb-entryx_refsource_VUPEN |
| http://securityreason.com/securityalert/1525 | third-party-advisoryx_refsource_SREASON |
| http://securitytracker.com/id?1016795 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/19860 | vdb-entryx_refsource_BID |
Date Public
2006-09-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:14:47.781Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "auditwizard-remoteaudit-password-disclosure(28743)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743"
},
{
"name": "20060905 AuditWizard 6.3.2 gives away administrator password",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/445220/100/0/threaded"
},
{
"name": "21773",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21773"
},
{
"name": "ADV-2006-3498",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/3498"
},
{
"name": "1525",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1525"
},
{
"name": "1016795",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016795"
},
{
"name": "19860",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19860"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-09-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "AuditWizard 6.3.2, when using \"Remote Audit,\" logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "auditwizard-remoteaudit-password-disclosure(28743)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743"
},
{
"name": "20060905 AuditWizard 6.3.2 gives away administrator password",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/445220/100/0/threaded"
},
{
"name": "21773",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21773"
},
{
"name": "ADV-2006-3498",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/3498"
},
{
"name": "1525",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1525"
},
{
"name": "1016795",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016795"
},
{
"name": "19860",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19860"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-4642",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "AuditWizard 6.3.2, when using \"Remote Audit,\" logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "auditwizard-remoteaudit-password-disclosure(28743)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28743"
},
{
"name": "20060905 AuditWizard 6.3.2 gives away administrator password",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/445220/100/0/threaded"
},
{
"name": "21773",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21773"
},
{
"name": "ADV-2006-3498",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/3498"
},
{
"name": "1525",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1525"
},
{
"name": "1016795",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016795"
},
{
"name": "19860",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19860"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-4642",
"datePublished": "2006-09-08T21:00:00.000Z",
"dateReserved": "2006-09-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:14:47.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}