NVD

Id
45036  
Name
CVE-2012-3441  
Description
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-25  
Modified Date
2013-01-24  
Seq
2012-3441  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225788 45036 CVE-2012-3441 openSUSE-SU-2012:0968  View
225789 45036 CVE-2012-3441 [oss-security] 20120730 CVE Request: icinga sample db creation scripts  View
225790 45036 CVE-2012-3441 [oss-security] 20120730 Re: CVE Request: icinga sample db creation scripts  View
225791 45036 CVE-2012-3441 icinga-database-sec-bypass(78874)  View
225792 45036 CVE-2012-3441 https://bugzilla.novell.com/show_bug.cgi?id=767319  View
225793 45036 CVE-2012-3441 https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=712813d3118a5b9e5a496179cab81dbe91f69d63  View
225794 45036 CVE-2012-3441 https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=dcd45fb6931c4abf710829bee21af09f842bc281  View
225795 45036 CVE-2012-3441 https://git.icinga.org/?p=icinga-doc.git;a=commitdiff;h=619a08ca1178144b8a3a5caafff32a2d3918edab  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28168 JVNDB-2012-003875 Icinga のデータベース作成スクリプトにおける他のデータベースにアクセスされる脆弱性 Icinga のデータベース作成スクリプト (module/idoutils/db/scripts/create_mysqldb.sh) は、icinga ユーザにすべてのデータベースへのアクセス権を付与するため、他のデータベースにアクセスされる脆弱性が存在します。 CVE-2012-3441 56679 CVE-2012-3441 45036 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003875.html 2012-08-25 2012-10-23 View