CVE-2011-0002 libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
MediumCVSS 6.4
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| miloslav trmac libuser | <= 0.56.18 | No fix listed |
| miloslav trmac libuser | = 0.1 | No fix listed |
| miloslav trmac libuser | = 0.2 | No fix listed |
| miloslav trmac libuser | = 0.3 | No fix listed |
| miloslav trmac libuser | = 0.4 | No fix listed |
| miloslav trmac libuser | = 0.5 | No fix listed |
| miloslav trmac libuser | = 0.6 | No fix listed |
| miloslav trmac libuser | = 0.7 | No fix listed |
| miloslav trmac libuser | = 0.8 | No fix listed |
| miloslav trmac libuser | = 0.8.1 | No fix listed |
| miloslav trmac libuser | = 0.8.2 | No fix listed |
| miloslav trmac libuser | = 0.9 | No fix listed |
| miloslav trmac libuser | = 0.10 | No fix listed |
| miloslav trmac libuser | = 0.11 | No fix listed |
| miloslav trmac libuser | = 0.16.1 | No fix listed |
| miloslav trmac libuser | = 0.18 | No fix listed |
| miloslav trmac libuser | = 0.20 | No fix listed |
| miloslav trmac libuser | = 0.21 | No fix listed |
| miloslav trmac libuser | = 0.23 | No fix listed |
| miloslav trmac libuser | = 0.24-3 | No fix listed |
| miloslav trmac libuser | = 0.24-4 | No fix listed |
| miloslav trmac libuser | = 0.25 | No fix listed |
| miloslav trmac libuser | = 0.25.1 | No fix listed |
| miloslav trmac libuser | = 0.26 | No fix listed |
| miloslav trmac libuser | = 0.27 | No fix listed |
Show 82 more
| Product | Affected versions | Fixed in |
|---|---|---|
| miloslav trmac libuser | = 0.28 | No fix listed |
| miloslav trmac libuser | = 0.29 | No fix listed |
| miloslav trmac libuser | = 0.30 | No fix listed |
| miloslav trmac libuser | = 0.31 | No fix listed |
| miloslav trmac libuser | = 0.32 | No fix listed |
| miloslav trmac libuser | = 0.49.90 | No fix listed |
| miloslav trmac libuser | = 0.49.91 | No fix listed |
| miloslav trmac libuser | = 0.49.92 | No fix listed |
| miloslav trmac libuser | = 0.49.93 | No fix listed |
| miloslav trmac libuser | = 0.49.95 | No fix listed |
| miloslav trmac libuser | = 0.49.96 | No fix listed |
| miloslav trmac libuser | = 0.49.97 | No fix listed |
| miloslav trmac libuser | = 0.49.98 | No fix listed |
| miloslav trmac libuser | = 0.49.99 | No fix listed |
| miloslav trmac libuser | = 0.49.100 | No fix listed |
| miloslav trmac libuser | = 0.49.101-1 | No fix listed |
| miloslav trmac libuser | = 0.49.101-2 | No fix listed |
| miloslav trmac libuser | = 0.49.102 | No fix listed |
| miloslav trmac libuser | = 0.50 | No fix listed |
| miloslav trmac libuser | = 0.50.2 | No fix listed |
| miloslav trmac libuser | = 0.51 | No fix listed |
| miloslav trmac libuser | = 0.51.1-1 | No fix listed |
| miloslav trmac libuser | = 0.51.1-2 | No fix listed |
| miloslav trmac libuser | = 0.51.2 | No fix listed |
| miloslav trmac libuser | = 0.51.4 | No fix listed |
| miloslav trmac libuser | = 0.51.5 | No fix listed |
| miloslav trmac libuser | = 0.51.6 | No fix listed |
| miloslav trmac libuser | = 0.51.7 | No fix listed |
| miloslav trmac libuser | = 0.51.7-3 | No fix listed |
| miloslav trmac libuser | = 0.51.7-7 | No fix listed |
| miloslav trmac libuser | = 0.51.8 | No fix listed |
| miloslav trmac libuser | = 0.51.9 | No fix listed |
| miloslav trmac libuser | = 0.51.10 | No fix listed |
| miloslav trmac libuser | = 0.51.11 | No fix listed |
| miloslav trmac libuser | = 0.51.12 | No fix listed |
| miloslav trmac libuser | = 0.52 | No fix listed |
| miloslav trmac libuser | = 0.52.1 | No fix listed |
| miloslav trmac libuser | = 0.52.2 | No fix listed |
| miloslav trmac libuser | = 0.52.3 | No fix listed |
| miloslav trmac libuser | = 0.52.4 | No fix listed |
| miloslav trmac libuser | = 0.52.5 | No fix listed |
| miloslav trmac libuser | = 0.52.6 | No fix listed |
| miloslav trmac libuser | = 0.53 | No fix listed |
| miloslav trmac libuser | = 0.53.1 | No fix listed |
| miloslav trmac libuser | = 0.53.2 | No fix listed |
| miloslav trmac libuser | = 0.53.3 | No fix listed |
| miloslav trmac libuser | = 0.53.4 | No fix listed |
| miloslav trmac libuser | = 0.53.5 | No fix listed |
| miloslav trmac libuser | = 0.53.6 | No fix listed |
| miloslav trmac libuser | = 0.53.7 | No fix listed |
| miloslav trmac libuser | = 0.53.8 | No fix listed |
| miloslav trmac libuser | = 0.54 | No fix listed |
| miloslav trmac libuser | = 0.54.1 | No fix listed |
| miloslav trmac libuser | = 0.54.2 | No fix listed |
| miloslav trmac libuser | = 0.54.3 | No fix listed |
| miloslav trmac libuser | = 0.54.4 | No fix listed |
| miloslav trmac libuser | = 0.54.5 | No fix listed |
| miloslav trmac libuser | = 0.54.6 | No fix listed |
| miloslav trmac libuser | = 0.54.7 | No fix listed |
| miloslav trmac libuser | = 0.54.8 | No fix listed |
| miloslav trmac libuser | = 0.55 | No fix listed |
| miloslav trmac libuser | = 0.56 | No fix listed |
| miloslav trmac libuser | = 0.56.1 | No fix listed |
| miloslav trmac libuser | = 0.56.2 | No fix listed |
| miloslav trmac libuser | = 0.56.3 | No fix listed |
| miloslav trmac libuser | = 0.56.4 | No fix listed |
| miloslav trmac libuser | = 0.56.5 | No fix listed |
| miloslav trmac libuser | = 0.56.6 | No fix listed |
| miloslav trmac libuser | = 0.56.7 | No fix listed |
| miloslav trmac libuser | = 0.56.8 | No fix listed |
| miloslav trmac libuser | = 0.56.9 | No fix listed |
| miloslav trmac libuser | = 0.56.10 | No fix listed |
| miloslav trmac libuser | = 0.56.11 | No fix listed |
| miloslav trmac libuser | = 0.56.12 | No fix listed |
| miloslav trmac libuser | = 0.56.13 | No fix listed |
| miloslav trmac libuser | = 0.56.14 | No fix listed |
| miloslav trmac libuser | = 0.56.15 | No fix listed |
| miloslav trmac libuser | = 0.56.16 | No fix listed |
| miloslav trmac libuser | = 0.56.17 | No fix listed |
| debian/libuser(Debian:12) | < 1:0.56.9.dfsg.1-1.1 | 1:0.56.9.dfsg.1-1.1 |
| debian/libuser(Debian:13) | < 1:0.56.9.dfsg.1-1.1 | 1:0.56.9.dfsg.1-1.1 |
| debian/libuser(Debian:14) | < 1:0.56.9.dfsg.1-1.1 | 1:0.56.9.dfsg.1-1.1 |
References
- kb.juniper.net
- FEDORA-2011-0316 vendor-advisory
- FEDORA-2011-0320 vendor-advisory
- 42891 third-party-advisory vendor-advisory
- 42966 third-party-advisory vendor-advisory
- 43047 third-party-advisory
- 1024960 vdb-entry
- MDVSA-2011:019 vendor-advisory
- 70421 vdb-entry
- RHSA-2011:0170 vendor-advisory
- 45791 vdb-entry
- ADV-2011-0184 vdb-entry vendor-advisory
- ADV-2011-0201 vdb-entry
- ADV-2011-0226 vdb-entry
- bugzilla.redhat.com exploit
- libuser-password-security-bypass(64677) vdb-entry
- fedorahosted.org
- Debian Security Tracker CVE-2011-0002 vendor-advisory
- bugs.debian.org issue-tracking