PT-2011-3891
CVE-2011-2467
·
تاريخ النشر
2011-07-27
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.8
متوسطةالمقاييسAV:A/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Lsass versions 5.4 through 6.1
Likewise Enterprise version 6.0
Description
A SQL injection issue in lsassd in Lsass in the Likewise Security Authority allows local users to execute arbitrary SQL commands.
Recommendations
For Lsass versions 5.4 through 6.1, consider restricting access to the SQL database to minimize the risk of exploitation.
For Likewise Enterprise version 6.0, restrict access to the SQL database to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾