What’s Vulnerable › Vulnerabilities

CVE-2005-2136

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-07-05 · updated 2026-06-16
• Weakness: CWE-863

Description

Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.

Affected products

• Raritan Dominion Sx16 Firmware: all versions
• Raritan Dominion Sx32 Firmware: 2.4.6
• Raritan Dominion Sx4 Firmware: all versions
• Raritan Dominion Sx8 Firmware: all versions
• Raritan Dominion Sxa-48 Firmware: all versions

References

• http://seclists.org/lists/bugtraq/2005/Jun/0251.html
• http://secunia.com/advisories/15853
• http://www.securityfocus.com/bid/14084
• http://seclists.org/lists/bugtraq/2005/Jun/0251.html
• http://secunia.com/advisories/15853
• http://www.securityfocus.com/bid/14084

Get alerted when CVE-2005-2136 or the next vulnerability affects your stack