VulnerabilityModified
CVE-2005-2136
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute…
MEDIUM 4.6EPSS 0.59%
Does this matter?
Lower severity and a low EPSS score (0.59%). Track it; it rarely justifies an emergency change on its own.
Description
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.59% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-863
- Affected
- raritan/dominion sx4 firmware · raritan/dominion sx8 firmware · raritan/dominion sx16 firmware · raritan/dominion sx32 firmware · raritan/dominion sxa-48 firmware
- Source
- cve@mitre.org
References
- http://seclists.org/lists/bugtraq/2005/Jun/0251.htmlExploit, Mailing List, Patch, Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/15853Not Applicable, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14084Broken Link, Third Party Advisory, VDB Entry
- http://seclists.org/lists/bugtraq/2005/Jun/0251.htmlExploit, Mailing List, Patch, Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/15853Not Applicable, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14084Broken Link, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.