CVE-2010-0833

The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.vupen.com/english/advisories/2010/1913	Vendor Advisory
http://secunia.com/advisories/40736	Vendor Advisory
http://www.likewise.com/community/index.php/forums/viewthread/772/	Patch Vendor Advisory
http://secunia.com/advisories/40725	Vendor Advisory
http://www.ubuntu.com/usn/USN-964-1
http://secunia.com/advisories/43244	Vendor Advisory
http://www.securitytracker.com/id?1025031
http://www.vupen.com/english/advisories/2011/0312	Vendor Advisory
http://marc.info/?l=bugtraq&m=129719002806096&w=2
http://www.securityfocus.com/archive/1/512643/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:likewise:likewise_open:6.0:::::::*
	cpe:2.3:a:likewise:likewise_open:5.4:::::::*

Configuration 2 (hide)

cpe:2.3:a:likewise:likewise_cifs:5.4:*:*:*:*:*:*:*

Information

Published : 2010-07-28 05:48

Updated : 2018-10-10 12:53

NVD link : CVE-2010-0833

Mitre link : CVE-2010-0833

JSON object : View

CWE

CWE-287

Improper Authentication

Advertisement

Products Affected

likewise

likewise_open
likewise_cifs

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.vupen.com/english/advisories/2010/1913", "name": "ADV-2010-1913", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://secunia.com/advisories/40736", "name": "40736", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.likewise.com/community/index.php/forums/viewthread/772/", "name": "http://www.likewise.com/community/index.php/forums/viewthread/772/", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/40725", "name": "40725", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.ubuntu.com/usn/USN-964-1", "name": "USN-964-1", "tags": [], "refsource": "UBUNTU"}, {"url": "http://secunia.com/advisories/43244", "name": "43244", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securitytracker.com/id?1025031", "name": "1025031", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2011/0312", "name": "ADV-2011-0312", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://marc.info/?l=bugtraq&m=129719002806096&w=2", "name": "SSRT1000385", "tags": [], "refsource": "HP"}, {"url": "http://www.securityfocus.com/archive/1/512643/100/0/threaded", "name": "20100726 [LWSA-2010-001] Likewise Open 5.4 & 6.0", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses \"SetPassword logic\" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-287"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-0833", "ASSIGNER": "security@ubuntu.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2010-07-28T12:48Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:likewise:likewise_open:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:likewise:likewise_open:5.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:likewise:likewise_cifs:5.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-10T19:53Z"}