What’s Vulnerable › Vulnerabilities

CVE-2004-2436

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-31 · updated 2026-06-16

Description

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

Affected products

• Broadcom Common Services: 1.0, 1.1, 2.0, 2.1, 2.2, 3.0
• Broadcom Unicenter Network And Systems Management: 3.0
• Broadcom Unicenter Serviceplus Service Desk: 6.0

References

• http://osvdb.org/displayvuln.php?osvdb_id=10408
• http://secunia.com/advisories/12639/
• http://securitytracker.com/id?1011468
• http://www.securityfocus.com/bid/11277
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17562
• http://osvdb.org/displayvuln.php?osvdb_id=10408
• http://secunia.com/advisories/12639/
• http://securitytracker.com/id?1011468
• http://www.securityfocus.com/bid/11277
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17562

Get alerted when CVE-2004-2436 or the next vulnerability affects your stack