Unscored severity · published Dec 31, 2004
CVE-2004-2436
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Common Services · Broadcom
1.0; 1.1; 2.0; 2.1; 2.2; 3.0 · source: NVD
UN
Unicenter Network And Systems Management · Broadcom
3.0 · source: NVD
US
Unicenter Serviceplus Service Desk · Broadcom
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2436
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2436
osvdb.org
http://osvdb.org/displayvuln.php?osvdb_id=10408
Vendor Advisory
http://secunia.com/advisories/12639/
securitytracker.com
http://securitytracker.com/id?1011468
Patch
http://www.securityfocus.com/bid/11277
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17562
More from Common Services
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-0042
Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1;…
–
CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss…
–
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary…