CVE

Id
39917  
CVE No.
CVE-2009-2482  
Status
Candidate  
Description
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.  
Phase
Assigned (20090716)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438716 39917 CVE-2009-2482 NETBSD:NetBSD-SA2009-004  View
438717 39917 CVE-2009-2482 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc  View
438718 39917 CVE-2009-2482 BID:35465  View
438719 39917 CVE-2009-2482 URL:http://www.securityfocus.com/bid/35465  View
438720 39917 CVE-2009-2482 OSVDB:55284  View
438721 39917 CVE-2009-2482 URL:http://osvdb.org/55284  View
438722 39917 CVE-2009-2482 SECTRACK:1022432  View
438723 39917 CVE-2009-2482 URL:http://www.securitytracker.com/id?1022432  View
438724 39917 CVE-2009-2482 SECUNIA:35553  View
438725 39917 CVE-2009-2482 URL:http://secunia.com/advisories/35553  View
438726 39917 CVE-2009-2482 XF:netbsd-openpam-security-bypass(51312)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40921 JVNDB-2009-001927 Sun Solaris の SCTP 実装におけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris の SCTP 実装には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-2486 39917 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001927.html  View