CVE-2007-6081

Description

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000.

Affected products

• adventnet / eventlog_analyzerbuild_4030 – build_4030

References

• MISChttp://osvdb.org/42423
• MISChttp://forums.adventnet.com/viewtopic.php?t=247521
• MISChttp://www.securityfocus.com/bid/26304
• VENDOR_ADVISORYhttp://secunia.com/advisories/27833