Auth bypass in Raritan Dominion Sx16

CVE-2005-2136

Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.

Vulnerability class: Broken Access Control

EPSS: 0.006 (44.6th percentile) — read the EPSS interpretation.

Affected products

Raritan Dominion_sx16
Raritan Dominion_sx16_firmware
Raritan Dominion_sx32
Raritan Dominion_sx32_firmware — versions 2.4.6
Raritan Dominion_sx4
Raritan Dominion_sx4_firmware
Raritan Dominion_sx8
Raritan Dominion_sx8_firmware
Raritan Dominion_sxa-48
Raritan Dominion_sxa-48_firmware

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch, Mailing List, Third Party Advisory)
cve@mitre.org (Patch, x_refsource_SECUNIA, Not Applicable, Vendor Advisory, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)