[security bulletin] HPSBST02630 SSRT1000385 rev.1 - HP StorageWorks X9000 Network Storage Systems, Remote Unauthenticated Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02712670 Version: 1 HPSBST02630 SSRT1000385 rev.1 - HP StorageWorks X9000 Network Storage Systems, Remote Unauthenticated Access NOTICE: The information in this Security Bulletin should be acted...

CVE-2010-0833

CVE-2010-0833 affects the pam_lsass library used by Likewise Open 5.4 (and CIFS 5.4 before build 8046) and 6.0 (before build 8234), as deployed in HP StorageWorks X9000 Network Storage Systems. The root-cause is a SetPassword logic path executed by a root service that can bypass authentication fo...

Ubuntu 10.04 LTS : likewise-open vulnerability (USN-964-1)

Matt Weatherford discovered that Likewise Open did not correctly check password expiration for the local-provider account. A local attacker could exploit this to log into a system they would otherwise not have access to. Note that Tenable Network Security has extracted the preceding description...