Lucene search

MitreCVE-2005-3140

HistoryOct 05, 2005 - 9:02 p.m.

CVE-2005-3140

2005-10-0521:02:00

CWE-319

mitre

web.nvd.nist.gov

procom netforce

nis password map

email attachment

security vulnerability

remote attacks

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

59.7%

JSON

Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes.

Affected configurations

Nvd

Node

procomnetforce_800_firmwareMatch4.02m10

AND

procomnetforce_800Match-

VendorProductVersionCPE
procomnetforce_800_firmware4.02cpe:2.3:o:procom:netforce_800_firmware:4.02:m10:*:*:*:*:*:*
procomnetforce_800-cpe:2.3:h:procom:netforce_800:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
procom	netforce_800_firmware	4.02	cpe:2.3:o:procom:netforce_800_firmware:4.02:m10::::::
procom	netforce_800	-	cpe:2.3:h:procom:netforce_800:-:::::::*

References

marc.info/?l=bugtraq&m=112818351032426&w=2

secunia.com/advisories/17033/

www.securityfocus.com/bid/14997

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

59.7%

JSON

Related for CVE-2005-3140