Vulnerability Details : CVE-2004-1942
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
Products affected by CVE-2004-1942
- cpe:2.3:a:sun:patch_manager:113579-04:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:113579-05:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:113579-02:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:113579-03:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:114342-02:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:114342-03:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:114342-04:*:*:*:*:*:*:*
- cpe:2.3:a:sun:patch_manager:114342-05:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-1942
0.40%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 73 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-1942
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2004-1942
-
http://www.ciac.org/ciac/bulletins/o-144.shtml
Exploit;Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/10261
Patch;Vendor Advisory
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1
Exploit;Patch;Vendor Advisory
-
http://marc.info/?l=bugtraq&m=108241638500417&w=2
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15908
Jump to