CVE-2010-0015
- State
- Published
- Severity
- Not scored
- Published
- Jan 14, 2010
- Updated
- Aug 7, 2024
- Reserved
- Dec 14, 2009
Description
nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- MDVSA-2010:111vendor-advisory
- [oss-security] 20100109 Re: CVE id request: GNU libc: NIS shadow password leakagemailing-list
- [oss-security] 20100107 CVE id request: GNU libc: NIS shadow password leakagemailing-list
- [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakagemailing-list
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333
- [oss-security] 20100108 Re: CVE id request: GNU libc: NIS shadow password leakagemailing-list
- SUSE-SA:2010:052vendor-advisory
- http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup
- MDVSA-2010:112vendor-advisory
- [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakagemailing-list
- http://sourceware.org/bugzilla/show_bug.cgi?id=11134
- [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakagemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.