CVE-2005-2136
Published Jul 5, 2005
Last updated 2 years ago
Overview
- Description
- Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-863
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:raritan:dominion_sx4_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56D7E942-0970-4BF1-AA34-A1432621F249"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:raritan:dominion_sx4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9428BA7E-1ADC-4FC6-9FF3-AD49DBEEF6A0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:raritan:dominion_sx8_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D855B42D-26C4-43E9-A438-C11A3E85500D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:raritan:dominion_sx8:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1CE8ABCF-12DC-4124-8326-A097947FEE01"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:raritan:dominion_sx16_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87C73AE4-DF17-4EB0-B962-D3C7CED2F105"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:raritan:dominion_sx16:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9B86E9EA-C9BE-4205-9CE7-6E650E6C2546"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:raritan:dominion_sx32_firmware:2.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6085690F-E5CB-491E-941F-99ABAC22D815"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:raritan:dominion_sx32:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "00C39BBF-42F3-45B0-B519-5E897682FEBE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:raritan:dominion_sxa-48_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DFF290F-B555-4B74-BAA4-ACCB4D08DED7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:raritan:dominion_sxa-48:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0F1879AB-E397-42EA-8570-7555B0AE1BB5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]