CVE-2011-3196 - CVE House
Back to Database
Status published Low CVE-2011-3196

The setup script in Domain Technologie Control (DTC) before 0.34.1...

Vulnerability Description

The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allows local users to obtain the dtcdaemons MySQL password by reading the file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-3196

Credits & Attribution

No credits recorded in the NVD database.

References

More from gplhost

View All →
CVE-2011-5276
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in...
Medium 6.5
CVE-2011-5275
The install script in Domain Technologie Control (DTC) before 0.34.1...
High 7.5
CVE-2011-5274
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC)...
High 7.5
CVE-2011-5273
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC)...
Medium 6.5
CVE-2011-5272
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1...
Medium 6.5

Affected Vendor

Affected Software

domain technologie control
Vulnerable Versions:
0, 0.24.6, 0.25.1, 0.25.2, 0.25.3, 0.26.7, 0.26.8, 0.26.9, 0.27.3, 0.28.2, 0.28.3, 0.28.4, 0.28.6, 0.28.9, 0.28.10, 0.29.1, 0.29.6, 0.29.8, 0.29.10, 0.29.14, 0.29.15, 0.29.16, 0.29.17, 0.30.6, 0.30.8, 0.30.10, 0.30.18, 0.30.20, 0.32.1, 0.32.2, 0.32.3, 0.32.4, 0.32.5, 0.32.6, 0.32.7

Timeline

Official Publish: March 20th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.