Lucene search

[email protected]NVD:CVE-2011-0002

HistoryJan 22, 2011 - 10:00 p.m.

CVE-2011-0002

2011-01-2222:00:06

CWE-310

[email protected]

web.nvd.nist.gov

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

JSON

libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.

Affected configurations

NVD

Node

miloslav_trmaclibuserRange≤0.56.18

miloslav_trmaclibuserMatch0.1

miloslav_trmaclibuserMatch0.2

miloslav_trmaclibuserMatch0.3

miloslav_trmaclibuserMatch0.4

miloslav_trmaclibuserMatch0.5

miloslav_trmaclibuserMatch0.6

miloslav_trmaclibuserMatch0.7

miloslav_trmaclibuserMatch0.8

miloslav_trmaclibuserMatch0.8.1

miloslav_trmaclibuserMatch0.8.2

miloslav_trmaclibuserMatch0.9

miloslav_trmaclibuserMatch0.10

miloslav_trmaclibuserMatch0.11

miloslav_trmaclibuserMatch0.16.1

miloslav_trmaclibuserMatch0.18

miloslav_trmaclibuserMatch0.20

miloslav_trmaclibuserMatch0.21

miloslav_trmaclibuserMatch0.23

miloslav_trmaclibuserMatch0.24-3

miloslav_trmaclibuserMatch0.24-4

miloslav_trmaclibuserMatch0.25

miloslav_trmaclibuserMatch0.25.1

miloslav_trmaclibuserMatch0.26

miloslav_trmaclibuserMatch0.27

miloslav_trmaclibuserMatch0.28

miloslav_trmaclibuserMatch0.29

miloslav_trmaclibuserMatch0.30

miloslav_trmaclibuserMatch0.31

miloslav_trmaclibuserMatch0.32

miloslav_trmaclibuserMatch0.49.90

miloslav_trmaclibuserMatch0.49.91

miloslav_trmaclibuserMatch0.49.92

miloslav_trmaclibuserMatch0.49.93

miloslav_trmaclibuserMatch0.49.95

miloslav_trmaclibuserMatch0.49.96

miloslav_trmaclibuserMatch0.49.97

miloslav_trmaclibuserMatch0.49.98

miloslav_trmaclibuserMatch0.49.99

miloslav_trmaclibuserMatch0.49.100

miloslav_trmaclibuserMatch0.49.101-1

miloslav_trmaclibuserMatch0.49.101-2

miloslav_trmaclibuserMatch0.49.102

miloslav_trmaclibuserMatch0.50

miloslav_trmaclibuserMatch0.50.2

miloslav_trmaclibuserMatch0.51

miloslav_trmaclibuserMatch0.51.1-1

miloslav_trmaclibuserMatch0.51.1-2

miloslav_trmaclibuserMatch0.51.2

miloslav_trmaclibuserMatch0.51.4

miloslav_trmaclibuserMatch0.51.5

miloslav_trmaclibuserMatch0.51.6

miloslav_trmaclibuserMatch0.51.7

miloslav_trmaclibuserMatch0.51.7-3

miloslav_trmaclibuserMatch0.51.7-7

miloslav_trmaclibuserMatch0.51.8

miloslav_trmaclibuserMatch0.51.9

miloslav_trmaclibuserMatch0.51.10

miloslav_trmaclibuserMatch0.51.11

miloslav_trmaclibuserMatch0.51.12

miloslav_trmaclibuserMatch0.52

miloslav_trmaclibuserMatch0.52.1

miloslav_trmaclibuserMatch0.52.2

miloslav_trmaclibuserMatch0.52.3

miloslav_trmaclibuserMatch0.52.4

miloslav_trmaclibuserMatch0.52.5

miloslav_trmaclibuserMatch0.52.6

miloslav_trmaclibuserMatch0.53

miloslav_trmaclibuserMatch0.53.1

miloslav_trmaclibuserMatch0.53.2

miloslav_trmaclibuserMatch0.53.3

miloslav_trmaclibuserMatch0.53.4

miloslav_trmaclibuserMatch0.53.5

miloslav_trmaclibuserMatch0.53.6

miloslav_trmaclibuserMatch0.53.7

miloslav_trmaclibuserMatch0.53.8

miloslav_trmaclibuserMatch0.54

miloslav_trmaclibuserMatch0.54.1

miloslav_trmaclibuserMatch0.54.2

miloslav_trmaclibuserMatch0.54.3

miloslav_trmaclibuserMatch0.54.4

miloslav_trmaclibuserMatch0.54.5

miloslav_trmaclibuserMatch0.54.6

miloslav_trmaclibuserMatch0.54.7

miloslav_trmaclibuserMatch0.54.8

miloslav_trmaclibuserMatch0.55

miloslav_trmaclibuserMatch0.56

miloslav_trmaclibuserMatch0.56.1

miloslav_trmaclibuserMatch0.56.2

miloslav_trmaclibuserMatch0.56.3

miloslav_trmaclibuserMatch0.56.4

miloslav_trmaclibuserMatch0.56.5

miloslav_trmaclibuserMatch0.56.6

miloslav_trmaclibuserMatch0.56.7

miloslav_trmaclibuserMatch0.56.8

miloslav_trmaclibuserMatch0.56.9

miloslav_trmaclibuserMatch0.56.10

miloslav_trmaclibuserMatch0.56.11

miloslav_trmaclibuserMatch0.56.12

miloslav_trmaclibuserMatch0.56.13

miloslav_trmaclibuserMatch0.56.14

miloslav_trmaclibuserMatch0.56.15

miloslav_trmaclibuserMatch0.56.16

miloslav_trmaclibuserMatch0.56.17

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.html

lists.fedoraproject.org/pipermail/package-announce/2011-January/053378.html

secunia.com/advisories/42891

secunia.com/advisories/42966

secunia.com/advisories/43047

securitytracker.com/id?1024960

www.mandriva.com/security/advisories?name=MDVSA-2011:019

www.osvdb.org/70421

www.redhat.com/support/errata/RHSA-2011-0170.html

www.securityfocus.com/bid/45791

www.vupen.com/english/advisories/2011/0184

www.vupen.com/english/advisories/2011/0201

www.vupen.com/english/advisories/2011/0226

bugzilla.redhat.com/show_bug.cgi?id=643227

exchange.xforce.ibmcloud.com/vulnerabilities/64677

fedorahosted.org/libuser/browser/NEWS?rev=libuser-0.57

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

JSON

Related for NVD:CVE-2011-0002

oraclelinux1 nessus10 openvas18 fedora2 veracode1 redhat1 centos1 cvelist1 f52 cve1 securityvulns2 prion1 ubuntucve1 debiancve1 vmware2