CVE-2010-0833: Critical severity likewise open vulnerability
The pamlsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0833?
CVE-2010-0833 has a high severity level due to its potential for allowing remote attackers to bypass authentication.
How do I fix CVE-2010-0833?
Fix CVE-2010-0833 by upgrading Likewise Open to version 5.4 build 8046, 6.0 build 8234, or later.
Which systems are impacted by CVE-2010-0833?
CVE-2010-0833 affects Likewise Open 5.4, Likewise Open 6.0, and Likewise CIFS 5.4 on HP StorageWorks X9000 Network Storage Systems and similar products.
What actions should I take if I am using vulnerable software related to CVE-2010-0833?
If using vulnerable software, immediately apply the recommended upgrades to mitigate the risk associated with CVE-2010-0833.
Is CVE-2010-0833 exploitable over the network?
Yes, CVE-2010-0833 is exploitable over the network, which poses a significant security risk.