2.1

CVE-2004-0653

EPSS 0.1%
Published 06.08.2004 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Sun ≫ Solaris Version9.0 Editionsparc

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.245

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

http://secunia.com/advisories/11940/

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1

http://www.ciac.org/ciac/bulletins/o-172.shtml

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/523710

Patch

Third Party Advisory

US Government Resource

http://www.securityfocus.com/bid/10606

https://exchange.xforce.ibmcloud.com/vulnerabilities/16450

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255

https://nvd.nist.gov/vuln/detail/CVE-2004-0653

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0653

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0653

EUVD