Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2011-2467

Publication date 19 July 2011

Last updated 24 July 2024

Ubuntu priority

High

Why this priority?

SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.

From the Ubuntu Security Team

It was discovered that an SQL injection vulnerability exists in the Likewise Security Authority (lsass) local authentication provider. A local attacker could use this to gain elevated privileges.

Status

Package Ubuntu Release Status
likewise-open 11.04 natty
Fixed 6.0.0.53010-4ubuntu5.1
10.10 maverick
Fixed 5.4.0.42111-2ubuntu2.1
10.04 LTS lucid
Fixed 5.4.0.42111-2ubuntu1.3
8.04 LTS hardy Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-1171-1
    • Likewise Open vulnerability
    • 20 July 2011

Other references