CVE-2010-0833
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service,…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 4.14% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- likewise/likewise open · likewise/likewise cifs
- Source
- security@ubuntu.com
References
- http://marc.info/?l=bugtraq&m=129719002806096&w=2
- http://secunia.com/advisories/40725Vendor Advisory
- http://secunia.com/advisories/40736Vendor Advisory
- http://secunia.com/advisories/43244Vendor Advisory
- http://www.likewise.com/community/index.php/forums/viewthread/772/Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/512643/100/0/threaded
- http://www.securitytracker.com/id?1025031
- http://www.ubuntu.com/usn/USN-964-1
- http://www.vupen.com/english/advisories/2010/1913Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0312Vendor Advisory
- http://marc.info/?l=bugtraq&m=129719002806096&w=2
- http://secunia.com/advisories/40725Vendor Advisory
- http://secunia.com/advisories/40736Vendor Advisory
- http://secunia.com/advisories/43244Vendor Advisory
- http://www.likewise.com/community/index.php/forums/viewthread/772/Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/512643/100/0/threaded
- http://www.securitytracker.com/id?1025031
- http://www.ubuntu.com/usn/USN-964-1
- http://www.vupen.com/english/advisories/2010/1913Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0312Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.