Unscored severity · published Jul 27, 2011
CVE-2011-2467
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute…
–
CVSS
0.7%
EPSS
No
On KEV
Description
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
Likewise Open · Likewise
5.4; 6.0; 6.0; 6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2467
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2467
Vendor Advisory
http://secunia.com/advisories/45276
Vendor Advisory
http://secunia.com/advisories/45326
Vendor Advisory
http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/
www.securityfocus.com
http://www.securityfocus.com/bid/48816
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1171-1
bugs.launchpad.net
https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748
More from Likewise Open
–
CVE-2011-1786
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and…
–
CVE-2010-0833
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other…