CVE-2010-0833
- State
- Published
- Severity
- Not scored
- Published
- Jul 27, 2010
- Updated
- Aug 7, 2024
- Reserved
- Mar 3, 2010
Description
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-964-1vendor-advisory
- 20100726 [LWSA-2010-001] Likewise Open 5.4 & 6.0mailing-list
- 40725third-party-advisory
- SSRT1000385vendor-advisory
- 40736third-party-advisory
- 43244third-party-advisory
- 1025031vdb-entry
- http://www.likewise.com/community/index.php/forums/viewthread/772/
- ADV-2010-1913vdb-entry
- ADV-2011-0312vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.