CVEvulnerability
CVE-2009-2482
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Affected configurations
• netbsd netbsd 4.0
• netbsd netbsd 4.0.1
• netbsd netbsd 4.1
• netbsd netbsd 5.0
Related
Weakness · not in database (1)
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc ftp.netbsd.org
- http://osvdb.org/55284 osvdb.org
- http://secunia.com/advisories/35553 Vendor Advisory
- http://www.securityfocus.com/bid/35465 www.securityfocus.com
- http://www.securitytracker.com/id?1022432 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51312 exchange.xforce.ibmcloud.com
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc ftp.netbsd.org
- http://osvdb.org/55284 osvdb.org
- http://secunia.com/advisories/35553 Vendor Advisory
- http://www.securityfocus.com/bid/35465 www.securityfocus.com
- http://www.securitytracker.com/id?1022432 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51312 exchange.xforce.ibmcloud.com