Unscored CVE-2006-2045 EUVD-2006-2046GHSA-9w55-vx84-pj8m

The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local us…

Published Apr 26, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the (2) NetAccess database file has world readable and writable permissions, which allows local users to view sensitive information and modify data.

References

ADV-2006-1540 vdb-entry
ip3-na75-database-file-permission(26110) vdb-entry
20060424 Multiple vulnerabilities in IP3 Networks 'NetAccess' NA75 appliance mailing-list
ip3-na75-shadow-file-permission(26109) vdb-entry
17698 vdb-entry
19818 third-party-advisory