Vulnerabilities > CVE-2004-1942 - Information Disclosure vulnerability in Sun Solaris Patch
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |