4.6
CVE-2005-2136
- EPSS 0.15%
- Veröffentlicht 05.07.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginRaritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Raritan ≫ Dominion Sx4 Firmware Version-
Raritan ≫ Dominion Sx8 Firmware Version-
Raritan ≫ Dominion Sx16 Firmware Version-
Raritan ≫ Dominion Sx32 Firmware Version2.4.6
Raritan ≫ Dominion Sxa-48 Firmware Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.326 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.