CVE-2004-2436: Low severity Broadcom Common Services vulnerability
Published Dec 31, 2004
·Updated
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.
Affected Software
8 affected components
Broadcom Common Services=1.0
Broadcom Common Services=1.1
Broadcom Common Services=2.0
Broadcom Common Services=2.1
Broadcom Common Services=2.2
Broadcom Common Services=3.0
Broadcom Unicenter Network And Systems Management=3.0
Broadcom Unicenter Serviceplus Service Desk=6.0
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 20, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2436?
CVE-2004-2436 is considered to have a medium severity due to the potential for local users to gain elevated privileges.
2
How do I fix CVE-2004-2436?
To fix CVE-2004-2436, remove or secure the TndAddNspTmp.bat file to ensure that the database 'SA' password is not stored in cleartext.
3
Who is affected by CVE-2004-2436?
CVE-2004-2436 affects users of Computer Associates Unicenter Common Services version 3.0 and earlier.
4
What types of systems are impacted by CVE-2004-2436?
CVE-2004-2436 impacts systems running Broadcom Common Services and related Unicenter products.
5
Can remote attackers exploit CVE-2004-2436?
CVE-2004-2436 is not exploitable by remote attackers; only local users can take advantage of the vulnerability.