CVE-2010-0833
The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.
Key facts
- CVSS score
- 9.3 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C- Weakness (CWE)
- CWE-287
- EPSS score
- 4.1% (91th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2010-0858)
- Published
- July 28, 2010
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2010-0858 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- likewise / likewise cifs
- likewise / likewise open
- likewise / likewise open
References
- http://marc.info/?l=bugtraq&m=129719002806096&w=2
- http://secunia.com/advisories/40725(Vendor Advisory)
- http://secunia.com/advisories/40736(Vendor Advisory)
- http://secunia.com/advisories/43244(Vendor Advisory)
- http://www.likewise.com/community/index.php/forums/viewthread/772/(Patch, Vendor Advisory)
- http://www.securityfocus.com/archive/1/512643/100/0/threaded
- http://www.securitytracker.com/id?1025031
- http://www.ubuntu.com/usn/USN-964-1
- http://www.vupen.com/english/advisories/2010/1913(Vendor Advisory)
- http://www.vupen.com/english/advisories/2011/0312(Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain