CVE-2006-2614
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the...
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
Exploit likelihood
What each source reports
NVD Score used
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
- Record
CVE-2006-2614- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
- Record
CVE-2006-2614- Updated
- 2026-11-02
EUVDEUVD-2006-2613 No score
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
- Record
EUVD-2006-2613- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjpm-pmf6-4ffj No score
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the...
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
- Record
GHSA-qjpm-pmf6-4ffj- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2614 is a medium vulnerability (CVSS 4.6) in Sun N1 System Manager, published May 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.
References
secunia.com/advisories/20127
securitytracker.com/id?1016119
securityfocus.com/bid/18023
sunsolve.sun.com/search/document.do?assetkey=1-26-102024-1
vupen.com/english/advisories/2006/1851
exchange.xforce.ibmcloud.com/vulnerabilities/26521
nvd.nist.gov/vuln/detail/CVE-2006-2614
github.com/advisories/GHSA-qjpm-pmf6-4ffj