NVD

Id
12369  
Name
CVE-2010-0833  
Description
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-28  
Modified Date
2011-02-14  
Seq
2010-0833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
68087 12369 CVE-2010-0833 SSRT1000385  View
68088 12369 CVE-2010-0833 http://www.likewise.com/community/index.php/forums/viewthread/772/  View
68089 12369 CVE-2010-0833 20100726 [LWSA-2010-001] Likewise Open 5.4 & 6.0  View
68090 12369 CVE-2010-0833 1025031  View
68091 12369 CVE-2010-0833 USN-964-1  View
68092 12369 CVE-2010-0833 ADV-2010-1913  View
68093 12369 CVE-2010-0833 ADV-2011-0312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38766 JVNDB-2010-004551 HP StorageWorks X9000 Network Storage Systems などにおける認証を回避される脆弱性 HP StorageWorks X9000 Network Storage Systems などで使用される Likewise Open および CIFS の pam_lsass ライブラリには、ルートサービスの一部として稼動している際、"SetPassword ロジック" を使用するため、パスワードが有効期限切れとしてマークされている Likewise Security Authority (lsassd) アカウントの認証を回避される脆弱性が存在します。 CVE-2010-0833 43413 CVE-2010-0833 12369 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004551.html 2010-07-28 2012-09-25 View