CVE-2011-2467

Name of the Vulnerable Software and Affected Versions Lsass versions 5.4 through 6.1 Likewise Enterprise version 6.0

Description A SQL injection issue in lsassd in Lsass in the Likewise Security Authority allows local users to execute arbitrary SQL commands.

Recommendations For Lsass versions 5.4 through 6.1, consider restricting access to the SQL database to minimize the risk of exploitation. For Likewise Enterprise version 6.0, restrict access to the SQL database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.