2.1

CVE-2004-0653

EPSS 0.18%
Veröffentlicht 06.08.2004 04:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sun ≫ Solaris Version9.0 Editionsparc

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.397

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/11940/

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1

http://www.ciac.org/ciac/bulletins/o-172.shtml

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/523710

Patch

Third Party Advisory

US Government Resource

http://www.securityfocus.com/bid/10606

https://exchange.xforce.ibmcloud.com/vulnerabilities/16450

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255

https://nvd.nist.gov/vuln/detail/CVE-2004-0653

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0653

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0653

EUVD