PT-2011-3367 · Likewise+1 · Likewise Open/Enterprise+3

Published 2011-05-03 · Updated 2018-10-09 · CVE-2011-1786

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Likewise Open versions prior to 6.0 build 8325 Likewise Open/Enterprise version 5.3 prior to build 7845 Likewise Enterprise versions prior to 6.0 build 178

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via an Active Directory login attempt with a username containing an invalid byte sequence.

Recommendations For Likewise Open versions prior to 6.0 build 8325, update to build 8325 or later. For Likewise Open/Enterprise version 5.3 prior to build 7845, update to build 7845 or later. For Likewise Enterprise versions prior to 6.0 build 178, update to build 178 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-1786

Affected Products

Active Directory

Likewise Enterprise

Likewise Open

Likewise Open/Enterprise

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2011-1786 · Security Note
• http://secunia.com/advisories/44349 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2011-0007.html · Vendor Advisory
• http://securitytracker.com/id?1025452 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1786 · Note
• http://likewise.com/community/index.php/forums/viewannounce/1104_27 · Note
• http://securityreason.com/securityalert/8240 · Note
• http://securityfocus.com/archive/1/517739/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67194 · Note
• http://lists.vmware.com/pipermail/security-announce/2011/000133.html · Note
• http://securityfocus.com/bid/47625 · Note
• http://kb.vmware.com/kb/1035108 · Note