CVE-2011-1786 lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, a...
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| likewise open | = 5.3 | No fix listed |
| likewise open | = 6.0 | No fix listed |
| VMware ESX | = 4.1 | No fix listed |
| VMware esxi | = 4.1 | No fix listed |
References
- kb.vmware.com
- [security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console mailing-list
- 44349 third-party-advisory vendor-advisory
- 8240 third-party-advisory
- 1025452 vdb-entry
- www.likewise.com
- 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console mailing-list
- 47625 vdb-entry
- www.vmware.com vendor-advisory
- likewise-lsaad-dos(67194) vdb-entry