CVE-2011-0002
At a glance
- Source
- NVD
- EPSS
- EPSS 3.79 % · percentile 90 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- redhat
- NVD status
- Modified
Description
libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
Weaknesses (CWE)
References
- http://www.redhat.com/support/errata/RHSA-2011-0170.html
- http://secunia.com/advisories/43047
- http://securitytracker.com/id?1024960
- https://bugzilla.redhat.com/show_bug.cgi?id=643227
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.html
- http://secunia.com/advisories/42891
- http://www.securityfocus.com/bid/45791
- http://www.vupen.com/english/advisories/2011/0226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64677
- http://www.vupen.com/english/advisories/2011/0201
- http://secunia.com/advisories/42966
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- https://fedorahosted.org/libuser/browser/NEWS?rev=libuser-0.57
- http://www.vupen.com/english/advisories/2011/0184
- http://www.osvdb.org/70421
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:019
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053378.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 2.0 | MEDIUM 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2011-0029
- GCVE · GCVE-0-2011-0002
CERT-FR advisories
- CERTFR-2015-AVI-431 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
- CERTA-2011-AVI-609 — Multiples vulnérabilités dans les produits VMWare · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:miloslav_trmac:libuser:*:*:*:*:*:*:*:*≤ 0.56.18cpe:2.3:a:miloslav_trmac:libuser:0.1:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.2:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.3:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.4:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.5:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.6:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.7:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.8:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.8.1:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.8.2:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.9:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.10:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.11:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.16.1:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.18:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.20:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.21:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.23:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.24-3:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.24-4:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.25:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.25.1:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.26:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.27:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.28:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.29:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.30:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.31:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.32:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.90:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.91:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.92:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.93:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.95:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.96:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.97:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.98:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.99:*:*:*:*:*:*:*cpe:2.3:a:miloslav_trmac:libuser:0.49.100:*:*:*:*:*:*:*- +64 more
Affected products
| Product | Versions |
|---|---|
| affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |