CVE-2004-2092

eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=107635584431518&w=2
http://secunia.com/advisories/10833	Vendor Advisory
http://www.excluded.org/advisories/advisory10.txt	URL Repurposed
http://www.osvdb.org/3896	Vendor Advisory
http://www.securityfocus.com/bid/9616
https://exchange.xforce.ibmcloud.com/vulnerabilities/15103
http://marc.info/?l=bugtraq&m=107635584431518&w=2
http://secunia.com/advisories/10833	Vendor Advisory
http://www.excluded.org/advisories/advisory10.txt	URL Repurposed
http://www.osvdb.org/3896	Vendor Advisory
http://www.securityfocus.com/bid/9616
https://exchange.xforce.ibmcloud.com/vulnerabilities/15103

Configurations

Configuration 1 (hide)

cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2004-02-09 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-2092

Mitre link : CVE-2004-2092

CVE.ORG link : CVE-2004-2092

JSON object : View

Products Affected

broadcom

inoculateit

CWE

NVD-CWE-Other

{"id": "CVE-2004-2092", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-02-09T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=107635584431518&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/10833", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.excluded.org/advisories/advisory10.txt", "tags": ["URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/3896", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9616", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15103", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=107635584431518&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/10833", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.excluded.org/advisories/advisory10.txt", "tags": ["URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/3896", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/9616", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15103", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CAE9329-AA34-4F56-B4BE-B028F021173B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}