PT-2011-3367 · Likewise+1 · Likewise Open/Enterprise+3

Publicado 2011-05-03 · Atualizado 2018-10-09 · CVE-2011-1786

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Likewise Open versions prior to 6.0 build 8325 Likewise Open/Enterprise version 5.3 prior to build 7845 Likewise Enterprise versions prior to 6.0 build 178

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via an Active Directory login attempt with a username containing an invalid byte sequence.

Recommendations For Likewise Open versions prior to 6.0 build 8325, update to build 8325 or later. For Likewise Open/Enterprise version 5.3 prior to build 7845, update to build 7845 or later. For Likewise Enterprise versions prior to 6.0 build 178, update to build 178 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-1786

Produtos afetados

Active Directory

Likewise Enterprise

Likewise Open

Likewise Open/Enterprise

Referências · 12

• http://securitytracker.com/id?1025452 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1786 · Nota de Segurança
• http://secunia.com/advisories/44349 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1786 · Nota
• http://likewise.com/community/index.php/forums/viewannounce/1104_27 · Nota
• http://securityreason.com/securityalert/8240 · Nota
• http://securityfocus.com/archive/1/517739/100/0/threaded · Nota
• http://vmware.com/security/advisories/VMSA-2011-0007.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67194 · Nota
• http://lists.vmware.com/pipermail/security-announce/2011/000133.html · Nota
• http://securityfocus.com/bid/47625 · Nota
• http://kb.vmware.com/kb/1035108 · Nota