CVE-2009-2482

Published: Jul 16, 2009Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.

Affected (7)

Products: Netbsd: Netbsd

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Netbsd Netbsd	Version 4.0.1
Netbsd Netbsd	Version 4.0
Netbsd Netbsd	Version 4.0 beta2
Netbsd Netbsd	Version 4.0 beta
Netbsd Netbsd	Version 4.1
Netbsd Netbsd	Version 5.0
Netbsd Netbsd	Version 5.0 rc3

Related CWEs

References (12)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc (unsafe URL)

Source: cve@mitre.org

http://osvdb.org/55284

Source: cve@mitre.org

http://secunia.com/advisories/35553

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/35465

Source: cve@mitre.org

http://www.securitytracker.com/id?1022432

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/51312

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/55284

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35553

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/35465

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1022432

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/51312

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.