CVE-2005-2136
Last modified
CVE-2005-2136 is a vulnerability of currently unknown severity. Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.. EPSS estimates a 0.59% chance of exploitation in the next 30 days.
Description
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Raritan | Dominion Sx4 Firmware | All versions |
| Raritan | Dominion Sx8 Firmware | All versions |
| Raritan | Dominion Sx16 Firmware | All versions |
| Raritan | Dominion Sx32 Firmware | 2.4.6 |
| Raritan | Dominion Sxa-48 Firmware | All versions |
References
- http://seclists.org/lists/bugtraq/2005/Jun/0251.htmlExploit, Mailing List, Patch, Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/15853Not Applicable, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14084Broken Link, Third Party Advisory, VDB Entry
- http://seclists.org/lists/bugtraq/2005/Jun/0251.htmlExploit, Mailing List, Patch, Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/15853Not Applicable, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14084Broken Link, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2136?
How severe is CVE-2005-2136?
How do I fix CVE-2005-2136?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2127Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote a…
- CVE-2005-2128QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote…
- CVE-2005-2132RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5…
- CVE-2005-2133Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2005-2134The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.…
- CVE-2005-2135SQL injection vulnerability in verify.asp in EtoShop Dynamic…
- CVE-2005-2137Unknown vulnerability in NateOn Messenger 3.0 allows remote …
- CVE-2005-2138Cross-site scripting (XSS) vulnerability in index.php in Com…
- CVE-2005-2139PHP remote file inclusion vulnerability in user_check.php fo…
- CVE-2005-2140Directory traversal vulnerability in default.asp for FSboard…
- CVE-2005-2141TCP Chat 1.0 allows remote attackers to cause a denial of se…
- CVE-2005-2142Directory traversal vulnerability in Golden FTP Server 2.60 …
Are you affected by CVE-2005-2136?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST