CVE:CVE-2005-2136
CNNVD:CNNVD-200507-018
Raritan Dominion SX Console Server是一套串口设备管理软件。
Raritan Dominion SX (DSX) Console Servers DSX16、DSX32、DSX4、DSX8和DSXA-48存在弱安全机制漏洞。
上述软件对/etc/shadow设置了所有用户均可读取的权限，使得本地用户可获取其他用户对密码HASH；对/bin/busybox设置了所有用户均可写入的许可权，使得本地用户可以其他用户身份执行任意代码。
solution:Upgrade raritan dominion_sx4_firmware to a higher version than -; Upgrade raritan dominion_sx8_firmware to a higher version than -; Upgrade raritan dominion_sx16_firmware to a higher version than -; Upgrade raritan dominion_sx32_firmware to a higher version than 2.4.6,and avoid the version 2.4.6; Upgrade raritan dominion_sxa-48_firmware to a higher version than -