← Vulnerability feed

Vulnerability record · CVE-2004-2436 · published 31 December 2004

CVE-2004-2436: Broadcom common services vulnerability

Broadcom · Common Services

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

2.1 CVSS 2.0 Low EPSS 0.47% · top 61.7%
2.1CVSS 2.0 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/displayvuln.php?osvdb_id=10408
http://secunia.com/advisories/12639/ Vendor Advisory
http://securitytracker.com/id?1011468
http://www.securityfocus.com/bid/11277 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17562
http://osvdb.org/displayvuln.php?osvdb_id=10408
http://secunia.com/advisories/12639/ Vendor Advisory
http://securitytracker.com/id?1011468
http://www.securityfocus.com/bid/11277 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17562

Track CVE-2004-2436 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0042Broadcom anti-spyware vulnerabilityMultiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterpr…EPSS 4.3%10.0CVE-2007-2863Broadcom anti-virus for the enterprise vulnerabilityStack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote …EPSS 23%10.0CVE-2005-2668CA Message Queuing buffer overflows allow remote code executionComputer Associates Message Queuing (CAM/CAFT) versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 contain multiple buffer overflows…EPSS 75%analysed10.0CVE-2005-2669Broadcom advantage data transport vulnerabilityComputer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute …EPSS 7.3%9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%9.3CVE-2007-0060Broadcom advantage data transport vulnerabilityStack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before…EPSS 24%9.3CVE-2007-2864CA Anti-Virus engine stack buffer overflow via crafted CAB fileThe Anti-Virus engine in multiple CA (Computer Associates) products before content update 30.6 has a stack-based buffer overflow triggered by a large…EPSS 50%analysed4.3CVE-2009-3588Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2004-2436), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.