CVE

Id
76877  
CVE No.
CVE-2014-9576  
Status
Candidate  
Description
VDG Security SENSE (formerly DIVA) 2.3.13 has a hardcoded password of (1) ArpaRomaWi for the root Postgres account and !DVService for the (2) postgres and (3) NTP Windows user accounts, which allows remote attackers to obtain access.  
Phase
Assigned (20150108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705607 76877 CVE-2014-9576 FULLDISC:20141218 SEC Consult SA-20141218-0 :: Multiple critical vulnerabilities in VDG Security SENSE (formerly DIVA)  View
705608 76877 CVE-2014-9576 URL:http://seclists.org/fulldisclosure/2014/Dec/76  View
705609 76877 CVE-2014-9576 MISC:http://packetstormsecurity.com/files/129656/VDG-Security-SENSE-2.3.13-File-Disclosure-Bypass-Buffer-Overflow.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18707 JVNDB-2014-007582 Linux Kernel の fs/isofs/rock.c におけるカーネルメモリから重要な情報を取得される脆弱性 Linux Kernel の fs/isofs/rock.c 内の parse_rock_ridge_inode_internal 関数は、Extensions Reference (ER) System Use Field 内の length 値を検証しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2014-9584 76877 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007582.html  View