CVE-2003-0174

Опубликовано: 12 мая 2003

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20030407-01-P
Broken Link
Patch
Vendor Advisory
http://www.ciac.org/ciac/bulletins/n-084.shtml
Broken Link
http://www.securityfocus.com/bid/7442
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11860
Third Party Advisory
VDB Entry
ftp://patches.sgi.com/support/free/security/advisories/20030407-01-P
Broken Link
Patch
Vendor Advisory
http://www.ciac.org/ciac/bulletins/n-084.shtml
Broken Link
http://www.securityfocus.com/bid/7442
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11860
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*

Версия до 6.5.19 (включая)

EPSS

Процентиль: 58%

0.00363

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-346

Связанные уязвимости

GHSA-7hxr-6x6c-cjh6

github

почти 4 года назад