CVE-2011-0002
N/A
Published: January 22, 2011 at 09:00 PM UTC
Updated: June 16, 2026 at 11:26 PM UTC
1 product affected across 1 vendorLibuser
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 0.56.180.10.100.110.16.10.180.20.200.210.230.24-30.24-40.250.25.10.260.270.280.290.30.300.310.320.40.49.1000.49.101-10.49.101-20.49.1020.49.900.49.910.49.920.49.930.49.950.49.960.49.970.49.980.49.990.50.500.50.20.510.51.1-10.51.1-20.51.100.51.110.51.120.51.20.51.40.51.50.51.60.51.70.51.7-30.51.7-70.51.80.51.90.520.52.10.52.20.52.30.52.40.52.50.52.60.530.53.10.53.20.53.30.53.40.53.50.53.60.53.70.53.80.540.54.10.54.20.54.30.54.40.54.50.54.60.54.70.54.80.550.560.56.10.56.100.56.110.56.120.56.130.56.140.56.150.56.160.56.170.56.20.56.30.56.40.56.50.56.60.56.70.56.80.56.90.60.70.80.8.10.8.20.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (17)
x_refsource_CONFIRM
Source: [email protected]
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053365.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053378.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/42891Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/42966Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:019Quick Info
StatusMODIFIED
CWE
CWE-310
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card