CVE-2011-2467: SQL Injection

Published Jul 27, 2011

Updated

SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.

Affected Software

4 affected components

Likewise Likewise Open=5.4

Likewise Likewise Open=6.0

Likewise Likewise Open=6.1

Likewise Likewise Open=6.0

Event History

Jul 27, 2011

CVE Published

via MITRE·01:29 AM

Data Sourced

via MITRE·01:29 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2467?

CVE-2011-2467 is classified as a medium severity vulnerability due to its potential for local exploitation.

How does CVE-2011-2467 affect users?

CVE-2011-2467 allows local users to execute arbitrary SQL commands, which could lead to unauthorized access to sensitive data.

How do I fix CVE-2011-2467?

To fix CVE-2011-2467, you should upgrade Likewise Open and Likewise Enterprise to versions that are not affected by this vulnerability.

What software versions are affected by CVE-2011-2467?

CVE-2011-2467 affects Likewise Open versions 5.4, 6.0, and 6.1.

Is there a workaround for CVE-2011-2467?

There are no known effective workarounds for CVE-2011-2467 other than updating to a secure version.