Lucene search
HistoryJul 16, 2009 - 4:30 p.m.
CVE-2009-2482
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
High
EPSS
0
Percentile
5.1%
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Affected configurations
Node
netbsdnetbsdMatch4.0
ORnetbsdnetbsdMatch4.0beta
ORnetbsdnetbsdMatch4.0beta2
ORnetbsdnetbsdMatch4.0.1
ORnetbsdnetbsdMatch4.1
ORnetbsdnetbsdMatch5.0
ORnetbsdnetbsdMatch5.0rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netbsd | netbsd | 4.0 | cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:* |
| netbsd | netbsd | 4.0 | cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:* |
| netbsd | netbsd | 4.0 | cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:* |
| netbsd | netbsd | 4.0.1 | cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:* |
| netbsd | netbsd | 4.1 | cpe:2.3:o:netbsd:netbsd:4.1:*:*:*:*:*:*:* |
| netbsd | netbsd | 5.0 | cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:* |
| netbsd | netbsd | 5.0 | cpe:2.3:o:netbsd:netbsd:5.0:rc3:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2009-07-16 16:30:00
cvelist
cvelist
CVE-2009-2482
2009-07-16 16:00:00
cve
cve
CVE-2009-2482
2009-07-16 16:30:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2009-2482