Lucene search
Ubuntu.comUB:CVE-2010-0015HistoryJan 14, 2010 - 12:00 a.m.
CVE-2010-0015
2010-01-1400:00:00
ubuntu.com
ubuntu.com
13
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.7%
nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and
Embedded GLIBC (EGLIBC) 2.10.2 adds information from the
passwd.adjunct.byname map to entries in the passwd map, which allows remote
attackers to obtain the encrypted passwords of NIS accounts by calling the
getpwnam function.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333>
- <https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/499425>
Notes
| Author | Note |
|---|---|
| mdeslaur | in lucid+, in patch debian/patches/any/submitted-nis-shadow.diff |
Related
nessus
nessus
Debian DSA-1973-1 : glibc, eglibc - information disclosure
2010-02-24 00:00:00
SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)
2011-12-13 00:00:00
SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)
2011-06-28 00:00:00
nvd
nvd
CVE-2010-0015
2010-01-14 18:30:00
debiancve
debiancve
CVE-2010-0015
2010-01-14 18:30:00
openvas
openvas
Debian Security Advisory DSA 1973-1 (glibc, eglibc)
2010-02-01 00:00:00
Debian: Security Advisory (DSA-1973-1)
2010-02-01 00:00:00
Mandriva Update for kdebase4-workspace MDVA-2010:112 (kdebase4-workspace)
2010-04-06 00:00:00
prion
prion
Code injection
2010-01-14 18:30:00
debian
debian
[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure
2010-01-19 22:32:45
cvelist
cvelist
CVE-2010-0015
2010-01-14 18:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure
2010-01-20 00:00:00
glibc getpwname information leak
2010-01-20 00:00:00
[USN-1396-1] GNU C Library vulnerabilities
2012-03-10 00:00:00
cve
cve
CVE-2010-0015
2010-01-14 18:30:00
osv
osv
glibc - information disclosure
2010-01-19 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2012-03-09 00:00:00
suse
suse
local privilege escalation in glibc
2010-10-28 13:41:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.7%
Related for UB:CVE-2010-0015