Vulnerability Description
Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain sensitive information from the database.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Ghost Solutions Suite | 1.0 |
| Symantec | Norton Ghost | 8.0 |
References
- http://secunia.com/advisories/19171Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html
- http://securitytracker.com/id?1015733
- http://www.vupen.com/english/advisories/2006/0870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25089
- http://secunia.com/advisories/19171Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html
- http://securitytracker.com/id?1015733
- http://www.vupen.com/english/advisories/2006/0870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25089
FAQ
What is CVE-2006-1286?
CVE-2006-1286 is a vulnerability with a CVSS score of 2.1 (LOW). Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain sensitiv...
How severe is CVE-2006-1286?
CVE-2006-1286 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-1286?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Ghost Solutions Suite, Symantec Norton Ghost.