Vulnerability Details : CVE-2011-0002

CVE Name: CVE-2011-0002: Other vulnerability on Miloslav Trmac Libuser
Description: libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
Publish date: 2011-01-22T22:00Z
Last Update: 2017-08-17T01:33Z

CVSS Scores & Vulnerability Types

CVSS Score
6.4
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactNONE
Actack VectorNETWORK
Actack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeNo info
Vulnerability Type(s)Other
CWE ID310

Products Affected By CVE-2011-0002

# Vendor Product Vulnerable Versions
1 Miloslav Trmac Libuser 104

Detail of Verions Affected

# Product Type Vendor Product Version
1 Application Miloslav Trmac Libuser *
2 Application Miloslav Trmac Libuser 0.56.17
3 Application Miloslav Trmac Libuser 0.56.10
4 Application Miloslav Trmac Libuser 0.56.9
5 Application Miloslav Trmac Libuser 0.56.1
6 Application Miloslav Trmac Libuser 0.56
7 Application Miloslav Trmac Libuser 0.54.3
8 Application Miloslav Trmac Libuser 0.54.2
9 Application Miloslav Trmac Libuser 0.53.4
10 Application Miloslav Trmac Libuser 0.53.3
11 Application Miloslav Trmac Libuser 0.52.2
12 Application Miloslav Trmac Libuser 0.52.1
13 Application Miloslav Trmac Libuser 0.51.7 7
14 Application Miloslav Trmac Libuser 0.51.7 3
15 Application Miloslav Trmac Libuser 0.51.1 1
16 Application Miloslav Trmac Libuser 0.51
17 Application Miloslav Trmac Libuser 0.49.98
18 Application Miloslav Trmac Libuser 0.49.97
19 Application Miloslav Trmac Libuser 0.32
20 Application Miloslav Trmac Libuser 0.31
21 Application Miloslav Trmac Libuser 0.25
22 Application Miloslav Trmac Libuser 0.24 4
23 Application Miloslav Trmac Libuser 0.24 3
24 Application Miloslav Trmac Libuser 0.10
25 Application Miloslav Trmac Libuser 0.9
26 Application Miloslav Trmac Libuser 0.56.16
27 Application Miloslav Trmac Libuser 0.56.15
28 Application Miloslav Trmac Libuser 0.56.8
29 Application Miloslav Trmac Libuser 0.56.7
30 Application Miloslav Trmac Libuser 0.55
31 Application Miloslav Trmac Libuser 0.54.8
32 Application Miloslav Trmac Libuser 0.54.1
33 Application Miloslav Trmac Libuser 0.54
34 Application Miloslav Trmac Libuser 0.53.2
35 Application Miloslav Trmac Libuser 0.53.1
36 Application Miloslav Trmac Libuser 0.52
37 Application Miloslav Trmac Libuser 0.51.12
38 Application Miloslav Trmac Libuser 0.51.7
39 Application Miloslav Trmac Libuser 0.51.6
40 Application Miloslav Trmac Libuser 0.50.2
41 Application Miloslav Trmac Libuser 0.50
42 Application Miloslav Trmac Libuser 0.49.102
43 Application Miloslav Trmac Libuser 0.49.96
44 Application Miloslav Trmac Libuser 0.49.95
45 Application Miloslav Trmac Libuser 0.30
46 Application Miloslav Trmac Libuser 0.29
47 Application Miloslav Trmac Libuser 0.23
48 Application Miloslav Trmac Libuser 0.21
49 Application Miloslav Trmac Libuser 0.8.2
50 Application Miloslav Trmac Libuser 0.8.1
51 Application Miloslav Trmac Libuser 0.2
52 Application Miloslav Trmac Libuser 0.1
53 Application Miloslav Trmac Libuser 0.4
54 Application Miloslav Trmac Libuser 0.3
55 Application Miloslav Trmac Libuser 0.56.12
56 Application Miloslav Trmac Libuser 0.56.11
57 Application Miloslav Trmac Libuser 0.56.4
58 Application Miloslav Trmac Libuser 0.56.3
59 Application Miloslav Trmac Libuser 0.56.2
60 Application Miloslav Trmac Libuser 0.54.5
61 Application Miloslav Trmac Libuser 0.54.4
62 Application Miloslav Trmac Libuser 0.53.6
63 Application Miloslav Trmac Libuser 0.53.5
64 Application Miloslav Trmac Libuser 0.52.4
65 Application Miloslav Trmac Libuser 0.52.3
66 Application Miloslav Trmac Libuser 0.51.9
67 Application Miloslav Trmac Libuser 0.51.8
68 Application Miloslav Trmac Libuser 0.51.2
69 Application Miloslav Trmac Libuser 0.51.1 2
70 Application Miloslav Trmac Libuser 0.49.100
71 Application Miloslav Trmac Libuser 0.49.99
72 Application Miloslav Trmac Libuser 0.49.91
73 Application Miloslav Trmac Libuser 0.49.90
74 Application Miloslav Trmac Libuser 0.26
75 Application Miloslav Trmac Libuser 0.25.1
76 Application Miloslav Trmac Libuser 0.16.1
77 Application Miloslav Trmac Libuser 0.11
78 Application Miloslav Trmac Libuser 0.6
79 Application Miloslav Trmac Libuser 0.5
80 Application Miloslav Trmac Libuser 0.56.14
81 Application Miloslav Trmac Libuser 0.56.13
82 Application Miloslav Trmac Libuser 0.56.6
83 Application Miloslav Trmac Libuser 0.56.5
84 Application Miloslav Trmac Libuser 0.54.7
85 Application Miloslav Trmac Libuser 0.54.6
86 Application Miloslav Trmac Libuser 0.53.8
87 Application Miloslav Trmac Libuser 0.53.7
88 Application Miloslav Trmac Libuser 0.53
89 Application Miloslav Trmac Libuser 0.52.6
90 Application Miloslav Trmac Libuser 0.52.5
91 Application Miloslav Trmac Libuser 0.51.11
92 Application Miloslav Trmac Libuser 0.51.10
93 Application Miloslav Trmac Libuser 0.51.5
94 Application Miloslav Trmac Libuser 0.51.4
95 Application Miloslav Trmac Libuser 0.49.101 2
96 Application Miloslav Trmac Libuser 0.49.101 1
97 Application Miloslav Trmac Libuser 0.49.93
98 Application Miloslav Trmac Libuser 0.49.92
99 Application Miloslav Trmac Libuser 0.28
100 Application Miloslav Trmac Libuser 0.27
101 Application Miloslav Trmac Libuser 0.20
102 Application Miloslav Trmac Libuser 0.18
103 Application Miloslav Trmac Libuser 0.8
104 Application Miloslav Trmac Libuser 0.7

References For CVE-2011-0002

Hyperlink Resource
https://fedorahosted.org/libuser/browser/NEWS?rev=libuser-0.57
http://www.osvdb.org/70421
http://securitytracker.com/id?1024960
http://www.securityfocus.com/bid/45791
https://bugzilla.redhat.com/show_bug.cgi?id=643227 Exploit
http://secunia.com/advisories/42891 Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0170.html
http://www.vupen.com/english/advisories/2011/0184 Vendor Advisory
http://secunia.com/advisories/42966 Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053378.html
http://www.vupen.com/english/advisories/2011/0201
http://secunia.com/advisories/43047
http://www.vupen.com/english/advisories/2011/0226
http://www.mandriva.com/security/advisories?name=MDVSA-2011:019
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
https://exchange.xforce.ibmcloud.com/vulnerabilities/64677