Description
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
References
- 20127 third-party-advisory
- 1016119 vdb-entry
- 18023 vdb-entry
- 102024 vendor-advisory
- ADV-2006-1851 vdb-entry
- sun-systemmanager-password-disclosure(26521) vdb-entry