PT-2005-3964 · Procom · Procom Netforce 800

Bambenek · Published 2005-10-05 · Updated 2024-01-25 · CVE-2005-3140

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Procom NetFORCE 800 version 4.02 M10 Build 20 and possibly other versions

Description The issue allows remote attackers to obtain cleartext NIS password hashes because the NIS password map (passwd.nis) is sent as a file attachment in diagnostic e-mail messages.

Recommendations For version 4.02 M10 Build 20 and possibly other versions, consider disabling the feature that sends diagnostic e-mail messages with the NIS password map as a file attachment until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2005-3140

Affected Products

Procom Netforce 800

References · 5

• http://secunia.com/advisories/17033 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3140 · Security Note
• http://marc.info/?l=bugtraq&m=112818351032426&w=2 · Note
• https://t.me/cvenotify/68744 · Telegram Post
• http://securityfocus.com/bid/14997 · Note