Secunia

Dimitry Snezhkov has reported two weaknesses and a security issue in Netcool/NeuSecure, which can be exploited by malicious, local users and by malicious people to disclose certain sensitive information.

1) Passwords are stored in cleartext in configuration files (e.g. /etc/neusecure.conf) that are readable by all users in the default configuration. This can be exploited to disclose database passwords.

2) The database connection log (/opt/NeuSecure/bin/ns_archiver.log) is readable by all users in the default configuration. This can be exploited to disclose the database passwords that are logged to the file.

The weaknesses have been reported in version 3.0. Other versions may also be affected.

3) The database logon credentials of the "ns" user is stored in clear text as applet parameters on the web page. This can potentially be exploited to gain access to the database.

The security issue has been reported in version 3.0. Other versions may also be affected.

Solution
Change the permissions of the affected files to prevent users from reading the files. Restrict access to the database to only trusted systems only.

Provided and/or discovered by
Dimitry Snezhkov

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042255.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042795.html

Deep Links
Links available in Customer Area