{"id":"CVE-2009-2482","state":"PUBLISHED","title":"The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not","description":"The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.","publishedAt":"2009-07-16T16:00:00.000Z","updatedAt":"2024-08-07T05:52:15.081Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.securitytracker.com/id?1022432","http://secunia.com/advisories/35553","http://osvdb.org/55284","http://www.securityfocus.com/bid/35465","https://exchange.xforce.ibmcloud.com/vulnerabilities/51312"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:19.962Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2009/2xxx/CVE-2009-2482.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2009-2482","state":"PUBLISHED","datePublished":"2009-07-16T16:00:00.000Z","dateUpdated":"2024-08-07T05:52:15.081Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2009-07-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.securitytracker.com/id?1022432","name":"1022432","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc","name":"NetBSD-SA2009-004","tags":["vendor-advisory","x_refsource_NETBSD"]},{"url":"http://secunia.com/advisories/35553","name":"35553","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://osvdb.org/55284","name":"55284","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.securityfocus.com/bid/35465","name":"35465","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51312","name":"netbsd-openpam-security-bypass(51312)","tags":["vdb-entry","x_refsource_XF"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2009-06-22T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-2482","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1022432","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1022432"},{"name":"NetBSD-SA2009-004","refsource":"NETBSD","url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc"},{"name":"35553","refsource":"SECUNIA","url":"http://secunia.com/advisories/35553"},{"name":"55284","refsource":"OSVDB","url":"http://osvdb.org/55284"},{"name":"35465","refsource":"BID","url":"http://www.securityfocus.com/bid/35465"},{"name":"netbsd-openpam-security-bypass(51312)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51312"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securitytracker.com/id?1022432","name":"1022432","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc","name":"NetBSD-SA2009-004","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred"]},{"url":"http://secunia.com/advisories/35553","name":"35553","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://osvdb.org/55284","name":"55284","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/35465","name":"35465","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51312","name":"netbsd-openpam-security-bypass(51312)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T05:52:15.081Z"}}]}}}