2.1

CVE-2004-0653

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Solaris Version9.0 Editionsparc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.342
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/11940/
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1
http://www.ciac.org/ciac/bulletins/o-172.shtml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/523710
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/10606
https://exchange.xforce.ibmcloud.com/vulnerabilities/16450
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255