SecuritySpace - CVE-2016-6531

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-6531

Description: ** DISPUTED ** Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a default blank password, but it can be changed ... We recommend that users change it, each customer receives direction."

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-6531
BugTraq ID: 92780
http://www.securityfocus.com/bid/92780
CERT/CC vulnerability note: VU#619767
http://www.kb.cert.org/vuls/id/619767
http://www.kb.cert.org/vuls/id/GWAN-ACVSBM

CVE ID:	CVE-2016-6531
Description:	DISPUTED Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a default blank password, but it can be changed ... We recommend that users change it, each customer receives direction."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6531 BugTraq ID: 92780 http://www.securityfocus.com/bid/92780 CERT/CC vulnerability note: VU#619767 http://www.kb.cert.org/vuls/id/619767 http://www.kb.cert.org/vuls/id/GWAN-ACVSBM