CVE-2010-0833

no score yetEPSS 4.1%

The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 before build 8046, and 6.0 before build 8234, as used in HP StorageWorks X9000 Network Storage Systems and possibly other products, uses "SetPassword logic" when running as part of a root service, which allows remote attackers to bypass authentication for a Likewise Security Authority (lsassd) account whose password is marked as expired.

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2010-07-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

likewise:likewise_cifs
likewise:likewise_open

References

http://marc.info/?l=bugtraq&m=129719002806096&w=2
http://secunia.com/advisories/40725
http://secunia.com/advisories/40736
http://secunia.com/advisories/43244
http://www.likewise.com/community/index.php/forums/viewthread/772/

Check your stack JSON