NVD

Id
7551  
Name
CVE-2011-0489  
Description
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server, as demonstrated by commands that are ordinarily sent by the (a) ookillls and (b) oostopams applications. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-01-18  
Modified Date
2011-07-19  
Seq
2011-0489  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42613 7551 CVE-2011-0489 15988  View
42614 7551 CVE-2011-0489 VU#782567  View
42615 7551 CVE-2011-0489 45803  View
42616 7551 CVE-2011-0489 ADV-2011-0127  View
42617 7551 CVE-2011-0489 objectivity-operations-sec-bypass(64699)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30797 JVNDB-2011-001036 Objectivity/DB 管理用ツールに認証不備の問題 Objectivity/DB の管理用ツール (例: ookillls, oostopams, etc) には、認証不備の問題が存在します。 CVE-2011-0489 48396 CVE-2011-0489 7551 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001036.html 2011-01-14 2011-02-04 View