CVE-2004-2436 Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.
LowCVSS 2.1
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom common services | = 1.0 | No fix listed |
| broadcom common services | = 1.1 | No fix listed |
| broadcom common services | = 2.0 | No fix listed |
| broadcom common services | = 2.1 | No fix listed |
| broadcom common services | = 2.2 | No fix listed |
| broadcom common services | = 3.0 | No fix listed |
| broadcom unicenter network and systems management | = 3.0 | No fix listed |
| broadcom unicenter serviceplus service desk | = 6.0 | No fix listed |
References
- 10408 vdb-entry
- 12639 third-party-advisory vendor-advisory
- 1011468 vdb-entry
- 11277 patch vdb-entry
- unicenter-tndaddnsptmp-information-disclosure(17562) vdb-entry