PT-2004-2839 · Oracle · Solaris

Chris Thompson · Publicado 2004-04-19 · Atualizado 2017-07-11 · CVE-2004-1942

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Solaris 9 versions 113579-02 through 113579-05 Solaris 9 versions 114342-02 through 114342-05

Description The issue allows local users to extract the contents of secure NIS maps, such as passwd.adjunct.byname, using ypcat or ypmatch due to improper access restriction by ypserv and ypxfrd.

Recommendations For Solaris 9 versions 113579-02 through 113579-05, apply the patch to update beyond version 113579-05. For Solaris 9 versions 114342-02 through 114342-05, apply the patch to update beyond version 114342-05.

Exploit

Correção

Identificadores relacionados

CVE-2004-1942

Produtos afetados

Solaris

Referências · 6

• 🔥 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1 · Exploit
• 🔥 http://ciac.org/ciac/bulletins/o-144.shtml · Exploit
• http://securityfocus.com/bid/10261 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1942 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108241638500417&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15908 · Nota