BID:14084

Raritan Dominion SX Multiple Vulnerabilities

Info

Raritan Dominion SX Multiple Vulnerabilities

Bugtraq ID:	14084
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jun 28 2005 12:00AM
Updated:	Jun 28 2005 12:00AM
Credit:	Discovery is credited to Dr. Dirk Wetter.
Vulnerable:	Raritan Dominion SXA-48 Raritan Dominion SX8 Raritan Dominion SX4 Raritan Dominion SX32 2.4.6 firmware Raritan Dominion SX32 Raritan Dominion SX16

Not Vulnerable:

Discussion

Raritan Dominion SX Multiple Vulnerabilities

Raritan Dominion SX is reportedly prone to multiple vulnerabilities.

Reportedly, the server contains two default accounts that are not protected with a password. This can allow a remote attacker to gain unauthorized access to the server.

Another issue can allow an attacker to potentially gain elevated privileges on an affected computer as the shadow password file is world readable.

Raritan Dominion SX16, SX32, SX4, SX8, and SXA-48 are reportedly vulnerable. The researcher responsible for reporting these issues has stated that DSX32 running firmware version 2.4.6 was tested and is vulnerable to these issues.

This BID will be updated when more details are available.

Exploit / POC

Raritan Dominion SX Multiple Vulnerabilities

An exploit is not required.

Solution / Fix

Raritan Dominion SX Multiple Vulnerabilities

Solution:
The vendor has released firmware upgrade Dominion SX FCR778 to address these issues.

Raritan Dominion SX16