medium4.6
CVE-2005-2136
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permi…
Impact
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Raritan | Dominion Sx4 Firmware | All versions |
| Raritan | Dominion Sx8 Firmware | All versions |
| Raritan | Dominion Sx16 Firmware | All versions |
| Raritan | Dominion Sx32 Firmware | Version 2.4.6 |
| Raritan | Dominion Sxa-48 Firmware | All versions |