RSS   Vulnerabilities for 'Likewise open'   RSS

2011-07-26
 
CVE-2011-2467

 

 
SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.

 
2011-05-03
 
CVE-2011-1786

CWE-399
 

 
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.

 
2010-07-28
 
CVE-2010-0833

CWE-287
 

 
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.

 

 >>> Vendor: Likewise 2 Products
Likewise cifs
Likewise open


Copyright 2024, cxsecurity.com

 

Back to Top