Description
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
References
- 20050628 Access right escalation / severe permission problems on Raritan Console Servers mailing-list
- 15853 third-party-advisory
- 14084 vdb-entry