CVE-2007-6480

Sun Management Center Oracle Database - Default Account Code Execution

Title source: manual

Description

The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attackers to obtain database access and execute arbitrary code.

References (8)

Core 8

Core References

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/28151

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1019119

Patch vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103152-1

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201508-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26948

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/39137

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/39563

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/4268

Scores

EPSS 0.0560

EPSS Percentile 90.4%

Details

Status published

Products (3)

sun/management\+center 3.5_update_1

sun/management\+center 3.6

sun/management\+center 3.6.1

Published Dec 20, 2007

Tracked Since Feb 18, 2026