CVE-2004-1942: Sun Patch Manager

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.

Affected products

• Sun Patch Manager: version 113579-02 only; version 113579-03 only; version 113579-04 only; version 113579-05 only; version 114342-02 only; version 114342-03 only; …

Published 2004-04-19. Last modified 2026-06-16.