PT-2004-2900 · Suse · Suse Linux 9.1 Personal Edition

Published 2004-05-06 · Updated 2017-07-11 · CVE-2004-2004

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SUSE LINUX 9.1 Personal edition

Description The issue is related to the Live CD configuration in SUSE LINUX 9.1 Personal edition, where the root account lacks a password. This configuration allows remote attackers to gain privileges via SSH.

Recommendations For SUSE LINUX 9.1 Personal edition, set a strong password for the root account to prevent unauthorized access via SSH.

Fix

Related Identifiers

CVE-2004-2004

Affected Products

Suse Linux 9.1 Personal Edition

References · 4

• http://securityfocus.com/bid/10297 · Vendor Advisory
• http://suse.de/de/security/2004_11_live_cd_91.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2004 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16084 · Note