nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333 - | |
| References | () http://marc.info/?l=oss-security&m=126320356003425&w=2 - | |
| References | () http://marc.info/?l=oss-security&m=126320570505651&w=2 - | |
| References | () http://sourceware.org/bugzilla/show_bug.cgi?id=11134 - | |
| References | () http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup - | |
| References | () http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 - | |
| References | () http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/01/07/3 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/01/08/1 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/01/08/2 - | |
| References | () http://www.openwall.com/lists/oss-security/2010/01/11/6 - | |
| References | () https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html - |
Information
Published : 2010-01-14 18:30
Updated : 2024-11-21 01:11
NVD link : CVE-2010-0015
Mitre link : CVE-2010-0015
CVE.ORG link : CVE-2010-0015
JSON object : View
Products Affected
gnu
- glibc
CWE
CWE-255
Credentials Management Errors