6.9

CVE-2009-2482

The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netbsd ≫ Netbsd Version4.0
Netbsd ≫ Netbsd Version4.0 Updatebeta
Netbsd ≫ Netbsd Version4.0 Updatebeta2
Netbsd ≫ Netbsd Version4.0.1
Netbsd ≫ Netbsd Version4.1
Netbsd ≫ Netbsd Version5.0
Netbsd ≫ Netbsd Version5.0 Updaterc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.222
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc
http://osvdb.org/55284
http://secunia.com/advisories/35553
Vendor Advisory
http://www.securityfocus.com/bid/35465
http://www.securitytracker.com/id?1022432
https://exchange.xforce.ibmcloud.com/vulnerabilities/51312