NVD Vulnerability Detail

CVE-2010-0833

Summary	The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.
Publication Date	July 28, 2010, 9:48 p.m.
Registration Date	Jan. 29, 2021, 10:58 a.m.
Last Update	Nov. 21, 2024, 10:13 a.m.

Affected software configurations

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:likewise:likewise_cifs:5.4:::::::*

Related information, measures and tools

No	URL	タグ
1	http://marc.info/?l=bugtraq&m=129719002806096&w=2
2	http://marc.info/?l=bugtraq&m=129719002806096&w=2
3	http://marc.info/?l=bugtraq&m=129719002806096&w=2
4	http://marc.info/?l=bugtraq&m=129719002806096&w=2
5	http://secunia.com/advisories/40725	Vendor Advisory
6	http://secunia.com/advisories/40725	Vendor Advisory
7	http://secunia.com/advisories/40736	Vendor Advisory
8	http://secunia.com/advisories/40736	Vendor Advisory
9	http://secunia.com/advisories/43244	Vendor Advisory
10	http://secunia.com/advisories/43244	Vendor Advisory
11	http://www.likewise.com/community/index.php/forums/viewthread/772/	Patch Vendor Advisory
12	http://www.likewise.com/community/index.php/forums/viewthread/772/	Patch Vendor Advisory
13	http://www.securityfocus.com/archive/1/512643/100/0/threaded
14	http://www.securityfocus.com/archive/1/512643/100/0/threaded
15	http://www.securitytracker.com/id?1025031
16	http://www.securitytracker.com/id?1025031
17	http://www.ubuntu.com/usn/USN-964-1
18	http://www.ubuntu.com/usn/USN-964-1
19	http://www.vupen.com/english/advisories/2010/1913	Vendor Advisory
20	http://www.vupen.com/english/advisories/2010/1913	Vendor Advisory
21	http://www.vupen.com/english/advisories/2011/0312	Vendor Advisory
22	http://www.vupen.com/english/advisories/2011/0312	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-287	不適切な認証	https://cwe.mitre.org/data/definitions/287.html

JVN Vulnerability Information

HP StorageWorks X9000 Network Storage Systems などにおける認証を回避される脆弱性

Title	HP StorageWorks X9000 Network Storage Systems などにおける認証を回避される脆弱性
Summary	HP StorageWorks X9000 Network Storage Systems などで使用される Likewise Open および CIFS の pam_lsass ライブラリには、ルートサービスの一部として稼動している際、"SetPassword ロジック" を使用するため、パスワードが有効期限切れとしてマークされている Likewise Security Authority (lsassd) アカウントの認証を回避される脆弱性が存在します。
Possible impacts	第三者により、パスワードが有効期限切れとしてマークされている Likewise Security Authority (lsassd) アカウントの認証を回避される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 28, 2010, midnight
Registration Date	Sept. 25, 2012, 5:38 p.m.
Last Update	Sept. 25, 2012, 5:38 p.m.

Affected System

likewise

likewise cifs build 8046 未満の 5.4、および build 8234 未満の 6.0

likewise open 5.4

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-0833	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0833
National Vulnerability Database (NVD)
2	CVE-2010-0833	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0833

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-287	https://jvndb.jvn.jp/ja/cwe/CWE-287.html

ベンダー情報

No	Name	URL
likewise
1	c02712670	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02712670

Change Log

No	Changed Details	Date of change
0	[2012年09月25日] 掲載	Feb. 17, 2018, 10:37 a.m.