CVE - CVE-2012-3441

CVE-ID
CVE-2012-3441	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=712813d3118a5b9e5a496179cab81dbe91f69d63 CONFIRM:https://git.icinga.org/?p=icinga-core.git;a=commitdiff;h=dcd45fb6931c4abf710829bee21af09f842bc281 CONFIRM:https://git.icinga.org/?p=icinga-doc.git;a=commitdiff;h=619a08ca1178144b8a3a5caafff32a2d3918edab MISC:https://bugzilla.novell.com/show_bug.cgi?id=767319 MLIST:[oss-security] 20120730 CVE Request: icinga sample db creation scripts URL:http://www.openwall.com/lists/oss-security/2012/07/30/6 MLIST:[oss-security] 20120730 Re: CVE Request: icinga sample db creation scripts URL:http://www.openwall.com/lists/oss-security/2012/07/30/7 SUSE:openSUSE-SU-2012:0968 URL:http://lists.opensuse.org/opensuse-updates/2012-08/msg00012.html XF:icinga-database-sec-bypass(78874) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/78874
Assigning CNA
Red Hat, Inc.
Date Record Created
20120614	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120614)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)