CVE-2009-2482
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-2482
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
NetBSD pam_unix模块非授权更改root口令漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NetBSD是一款免费开放源代码的UNIX性质的操作系统 。 NetBSD所提供的pam_unix认证模块没有正确地验证执行口令更改的用户，通过认证的非特权用户如果知道了旧的root口令就可以更改该口令。通常认证为root仅限于被称为wheel组的成员，以限制泄露root口令所造成的影响。因此，能够更改root口令应仅限于认证为root的用户 。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-2482
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-2482
请登录查看更多情报信息。
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.ascvendor-advisoryx_refsource_NETBSD
- https://nvd.nist.gov/vuln/detail/CVE-2009-2482
Same Patch Batch · n/a · 2009-07-16 · 17 CVEs total
| CVE-2009-2480 | Six Apart Movable Type mt-wizard.cgi跨站脚本攻击漏洞 | |
| CVE-2009-2481 | Six Apart Movable Type mt-wizard.cgi 安全绕过漏洞 | |
| CVE-2009-2483 | NetBSD proplib库XML处理拒绝服务漏洞 | |
| CVE-2009-2484 | Videolan VLC媒体播放器smb:// URI处理栈溢出漏洞 | |
| CVE-2009-2485 | Tingan HT-MP3Player 缓冲区溢出漏洞 | |
| CVE-2009-2486 | Sun Solaris&OpenSolaris SCTP应用 未明漏洞 | |
| CVE-2009-2487 | Sun Solaris&OpenSolaris 子系统ipfilter 远程拒绝服务漏洞 | |
| CVE-2009-2488 | Sun Solaris&OpenSolaris 模块NFSv4 未明漏洞 | |
| CVE-2009-2489 | Sun Ray Server Software 程序utdmsession 权限与访问控制漏洞 | |
| CVE-2009-2490 | Sun Ray Server Software 后台程序utaudiod 未明漏洞 | |
| CVE-2009-2491 | Sun Ray Server Software 后台程序utaudiod 权限及访问控制漏洞 | |
| CVE-2009-1895 | Linux kernel 配置错误漏洞 | |
| CVE-2009-2047 | Cisco Unified CCX管理页面目录遍历漏洞 | |
| CVE-2009-2048 | Cisco Unified CCX管理页面脚本注入漏洞 | |
| CVE-2009-2478 | Mozilla Firefox 拒绝服务漏洞 | |
| CVE-2009-2479 | Mozilla Firefox Unicode数据 远程拒绝服务漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2009-2482
No comments yet