CVE-2004-2436

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Common Services (Broadcom)
• Unicenter Network And Systems Management (Broadcom)
• Unicenter Serviceplus Service Desk (Broadcom)

References

• http://osvdb.org/displayvuln.php?osvdb_id=10408
• http://secunia.com/advisories/12639/
• http://securitytracker.com/id?1011468
• http://www.securityfocus.com/bid/11277
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17562