CVE-2004-1942 The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun patch manager | = 113579-02 | No fix listed |
| sun patch manager | = 113579-03 | No fix listed |
| sun patch manager | = 113579-04 | No fix listed |
| sun patch manager | = 113579-05 | No fix listed |
| sun patch manager | = 114342-02 | No fix listed |
| sun patch manager | = 114342-03 | No fix listed |
| sun patch manager | = 114342-04 | No fix listed |
| sun patch manager | = 114342-05 | No fix listed |
References
- 20040419 Solaris 9 patch 113579-03 introduces a NIS security bug mailing-list
- 57554 exploit patch vendor-advisory
- O-144 exploit government-resource patch third-party-advisory vendor-advisory
- 10261 patch vdb-entry vendor-advisory
- solaris-nis-unauth-privileges(15908) vdb-entry