Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-0833

Date: July 27, 2010

The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.

Severity Score

Related Resources (13)

http://secunia.com/advisories/43244
http://www.likewise.com/community/index.php/forums/viewthread/772/
https://nvd.nist.gov/vuln/detail/CVE-2010-0833
http://www.securityfocus.com/archive/1/512643/100/0/threaded
http://www.securitytracker.com/id?1025031
http://secunia.com/advisories/40725
http://marc.info/?l=bugtraq&m=129719002806096&w=2
http://secunia.com/advisories/40736
http://www.vupen.com/english/advisories/2010/1913
http://www.ubuntu.com/usn/USN-964-1
http://www.vupen.com/english/advisories/2011/0312
https://people.canonical.com/~ubuntu-security/cve/CVE-2010-0833
https://www.mend.io/vulnerability-database/CVE-2010-0833

Severity Score

Weakness Type (CWE)

Authentication Issues

CWE-287

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us