Unscored severity · published Jul 28, 2010
CVE-2010-0833
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other…
–
CVSS
4.1%
EPSS
No
On KEV
Description
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LC
Likewise Cifs · Likewise
5.4 · source: NVD
LO
Likewise Open · Likewise
5.4; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0833
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0833
marc.info
http://marc.info/?l=bugtraq&m=129719002806096&w=2
Vendor Advisory
http://secunia.com/advisories/40725
Vendor Advisory
http://secunia.com/advisories/40736
Vendor Advisory
http://secunia.com/advisories/43244
Patch
http://www.likewise.com/community/index.php/forums/viewthread/772/
www.securityfocus.com
http://www.securityfocus.com/archive/1/512643/100/0/threaded