Vulnerability in Sun Patch Manager
CVE-2004-1942
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.
Affected products
- Sun Patch_manager — versions 113579-02, 113579-03, 113579-04
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, Patch, government-resource, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Exploit, vendor-advisory, Patch, x_refsource_SUNALERT, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)