CVE-2004-1942

CVE-2004-1942 describes a vulnerability in Solaris 9 patches 113579-02 through 113579-05 and 114342-02 through 114342-05, where ypserv and ypxfrd fail to properly restrict access to secure NIS maps. This flaw allows local users to extract sensitive information, such as password data from passwd.adjunct.byname, using ypcat or ypmatch. With a CVSS score of 7.5, this vulnerability is considered high severity, indicating a network-based attack with low complexity that could lead to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.