CVE-2005-3316 in On Command Discovery
Summary
by MITRE
The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/30/2017
The vulnerability identified as CVE-2005-3316 represents a critical security flaw in Symantec Discovery versions 4.5.x and 6.0 where the installation process improperly configures database accounts with null passwords. This weakness stems from inadequate secure configuration practices during the software deployment phase, creating persistent security risks that can be exploited by malicious actors. The vulnerability affects the DiscoveryWeb and DiscoveryRO database accounts specifically, which are essential components for the proper functioning of the Symantec Discovery system. These accounts are designed to handle web interface operations and read-only database access respectively, making them prime targets for attackers seeking unauthorized system access.
The technical implementation of this vulnerability lies in the database account creation process where default credentials are established without proper password enforcement. When database accounts are created with null passwords, they become inherently insecure and can be accessed by any user who knows the account names and has network access to the database server. This configuration violates fundamental security principles outlined in the CWE-798 weakness category, which specifically addresses the use of hard-coded credentials and the improper handling of authentication mechanisms. The flaw essentially provides a backdoor access method that bypasses normal authentication procedures and allows for privilege escalation or system disruption.
The operational impact of this vulnerability is significant as it creates multiple attack vectors for potential exploitation. An attacker with network access to the database server could immediately gain unauthorized access to the DiscoveryWeb account to perform administrative functions or access sensitive data through the DiscoveryRO account for read-only operations. The vulnerability also creates a scenario where legitimate administrators might inadvertently lock themselves out of the system if they attempt to set passwords on accounts that were originally configured with null credentials. This creates a dangerous situation where system availability is compromised, as the software may fail to operate correctly if password changes are made without proper coordination.
This vulnerability aligns with several ATT&CK framework techniques including T1078 Valid Accounts for legitimate access and T1566 Phishing for credential access, as attackers could exploit these weak credentials to gain system access. The flaw also relates to T1021 Remote Services which covers the exploitation of network services that are improperly configured. Organizations using affected Symantec Discovery versions face substantial risk of data breaches, system compromise, and operational disruption. The vulnerability demonstrates poor secure configuration practices that should be addressed through proper security hardening procedures. Mitigation strategies include immediately setting strong passwords for the affected database accounts, implementing proper access controls, and ensuring that all database accounts are configured with unique, complex credentials during installation. Additionally, regular security audits should verify that no accounts remain with null or default passwords, and system administrators should follow security best practices for database account management. The incident underscores the importance of secure configuration management and proper credential handling as outlined in industry standards such as NIST SP 800-53 and ISO 27001 controls for access control and system configuration.