Unscored severity · published Jan 14, 2010
CVE-2010-0015
nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd…
–
CVSS
3.1%
EPSS
No
On KEV
Description
nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GL
Glibc · Gnu
2.7; 2.10.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0015
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0015
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333
marc.info
http://marc.info/?l=oss-security&m=126320356003425&w=2
marc.info
http://marc.info/?l=oss-security&m=126320570505651&w=2
sourceware.org
http://sourceware.org/bugzilla/show_bug.cgi?id=11134
svn.debian.org
http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2010:111
More from Glibc
7.8
CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
9.8
CVE-2026-5450
scanf %mc off-by-one heap buffer overflow
9.8
CVE-2023-0687
A vulnerability was found in GNU C Library 2.38
9.8
CVE-2023-25139
sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size
9.8
CVE-2022-23218
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating…