PT-2004-2839 · Oracle · Solaris

Chris Thompson · Published 2004-04-19 · Updated 2017-07-11 · CVE-2004-1942

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Solaris 9 versions 113579-02 through 113579-05 Solaris 9 versions 114342-02 through 114342-05

Description The issue allows local users to extract the contents of secure NIS maps, such as passwd.adjunct.byname, using ypcat or ypmatch due to improper access restriction by ypserv and ypxfrd.

Recommendations For Solaris 9 versions 113579-02 through 113579-05, apply the patch to update beyond version 113579-05. For Solaris 9 versions 114342-02 through 114342-05, apply the patch to update beyond version 114342-05.

Exploit

Fix

Related Identifiers

CVE-2004-1942

Affected Products

Solaris

References · 6

• 🔥 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1 · Exploit
• 🔥 http://ciac.org/ciac/bulletins/o-144.shtml · Exploit
• http://securityfocus.com/bid/10261 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1942 · Security Note
• http://marc.info/?l=bugtraq&m=108241638500417&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15908 · Note