CVE-2006-1009 - M4 Project enigma-suite before 0.73.3 (Windows) has a default password of "nominal" for the "enigma-

CVE-2006-1009

Summary

M4 Project enigma-suite before 0.73.3 (Windows) has a default password of "nominal" for the "enigma-client" account, which allows local users to gain access.

References

Vulnerable Configurations

cpe:2.3:a:m4_project:enigma-suite:0.70:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.70:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.71:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.71:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.72:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.72:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.73:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.73:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.73.1:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.73.1:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.73.2:*:*:*:*:*:*:*
cpe:2.3:a:m4_project:enigma-suite:0.73.2:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 20-07-2017 - 01:30)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

confirm	http://www.bytereef.org/m4-project-blog.html
osvdb	23572
secunia	19077
vupen	ADV-2006-0787
xf	enigma-suite-default-acoount(24993)

Last major update

20-07-2017 - 01:30

Published

06-03-2006 - 20:06

Last modified

20-07-2017 - 01:30