Lucene search
HistoryJul 16, 2009 - 4:30 p.m.
CVE-2009-2482
pam_unix
openpam
netbsd
cve-2009-2482
security
vulnerability
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Affected configurations
Node
netbsdnetbsdMatch4.0
ORnetbsdnetbsdMatch4.0beta
ORnetbsdnetbsdMatch4.0beta2
ORnetbsdnetbsdMatch4.0.1
ORnetbsdnetbsdMatch4.1
ORnetbsdnetbsdMatch5.0
ORnetbsdnetbsdMatch5.0rc3
| CPE | Name | Operator | Version |
|---|---|---|---|
| netbsd:netbsd | netbsd | eq | 4.0 |
| netbsd:netbsd | netbsd | eq | 4.0.1 |
| netbsd:netbsd | netbsd | eq | 4.1 |
| netbsd:netbsd | netbsd | eq | 5.0 |
Related
nvd
nvd
CVE-2009-2482
2009-07-16 16:30:00
prion
prion
Design/Logic Flaw
2009-07-16 16:30:00
cvelist
cvelist
CVE-2009-2482
2009-07-16 16:00:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2009-2482