CVE-2007-6480 The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attackers to obtain database access and execute arbitrary code.
HighCVSS 9.4
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attackers to obtain database access and execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun management+center | = 3.5_update_1 | No fix listed |
| sun management+center | = 3.6 | No fix listed |
| sun management+center | = 3.6.1 | No fix listed |
References
- 39563 vdb-entry
- 28151 patch third-party-advisory vendor-advisory
- 103152 patch vendor-advisory
- 201508 vendor-advisory
- 26948 vdb-entry
- 1019119 vdb-entry
- ADV-2007-4268 vdb-entry
- sunmc-smcorau-unauthorized-access(39137) vdb-entry