libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:23
Type | Values Removed | Values Added |
---|---|---|
References | () http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.html - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053378.html - | |
References | () http://secunia.com/advisories/42891 - Vendor Advisory | |
References | () http://secunia.com/advisories/42966 - Vendor Advisory | |
References | () http://secunia.com/advisories/43047 - | |
References | () http://securitytracker.com/id?1024960 - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2011:019 - | |
References | () http://www.osvdb.org/70421 - | |
References | () http://www.redhat.com/support/errata/RHSA-2011-0170.html - | |
References | () http://www.securityfocus.com/bid/45791 - | |
References | () http://www.vupen.com/english/advisories/2011/0184 - Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2011/0201 - | |
References | () http://www.vupen.com/english/advisories/2011/0226 - | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=643227 - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/64677 - | |
References | () https://fedorahosted.org/libuser/browser/NEWS?rev=libuser-0.57 - |
Information
Published : 2011-01-22 22:00
Updated : 2024-11-21 01:23
NVD link : CVE-2011-0002
Mitre link : CVE-2011-0002
CVE.ORG link : CVE-2011-0002
JSON object : View
Products Affected
miloslav_trmac
- libuser
CWE
CWE-310
Cryptographic Issues