Lucene search
MitreCVE-2009-2482HistoryJul 16, 2009 - 4:30 p.m.
CVE-2009-2482
2009-07-1616:30:00
CWE-264
mitre
web.nvd.nist.gov
28
pam_unix
openpam
netbsd
cve-2009-2482
security
vulnerability
nvd
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
5.1%
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Affected configurations
Node
netbsdnetbsdMatch4.0
ORnetbsdnetbsdMatch4.0beta
ORnetbsdnetbsdMatch4.0beta2
ORnetbsdnetbsdMatch4.0.1
ORnetbsdnetbsdMatch4.1
ORnetbsdnetbsdMatch5.0
ORnetbsdnetbsdMatch5.0rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netbsd | netbsd | 4.0 | cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:* |
| netbsd | netbsd | 4.0 | cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:* |
| netbsd | netbsd | 4.0 | cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:* |
| netbsd | netbsd | 4.0.1 | cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:* |
| netbsd | netbsd | 4.1 | cpe:2.3:o:netbsd:netbsd:4.1:*:*:*:*:*:*:* |
| netbsd | netbsd | 5.0 | cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:* |
| netbsd | netbsd | 5.0 | cpe:2.3:o:netbsd:netbsd:5.0:rc3:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2009-07-16 16:30:00
nvd
nvd
CVE-2009-2482
2009-07-16 16:30:00
cvelist
cvelist
CVE-2009-2482
2009-07-16 16:00:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2009-2482