PT-2011-3891 · Likewise · Lsass+1

Publicado 2011-07-27 · Atualizado 2017-08-29 · CVE-2011-2467

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lsass versions 5.4 through 6.1 Likewise Enterprise version 6.0

Description A SQL injection issue in lsassd in Lsass in the Likewise Security Authority allows local users to execute arbitrary SQL commands.

Recommendations For Lsass versions 5.4 through 6.1, consider restricting access to the SQL database to minimize the risk of exploitation. For Likewise Enterprise version 6.0, restrict access to the SQL database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2011-2467

Produtos afetados

Likewise Enterprise

Lsass

Referências · 9

• https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748 · Nota
• http://securityfocus.com/bid/48816 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68765 · Nota
• http://ubuntu.com/usn/USN-1171-1 · Aviso do Fabricante
• http://likewise.com/community/index.php/forums/viewannounce/1212_6 · Aviso do Fabricante
• http://secunia.com/advisories/45326 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-2467 · Nota de Segurança
• https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt · Nota
• http://secunia.com/advisories/45276 · Aviso do Fabricante