CVE-2009-2482 Privilege escalation in n/a

What is CVE-2009-2482?

CVE-2009-2482 is a medium-severity vulnerability in Netbsd Netbsd, published on 16 Jul 2009. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.

Weakness: CWE-264

Which versions are affected by CVE-2009-2482?

It affects 1 product.

Products include Netbsd Netbsd.

How do I fix CVE-2009-2482?

No fix has been published for CVE-2009-2482 yet. Limit exposure of the affected software until one is available.

Is CVE-2009-2482 being exploited?

There is no known exploitation of CVE-2009-2482 in the wild and no public exploit code.

Other vulnerabilities in Netbsd Netbsd

• CVE-2017-1000374 Security feature bypass in n/a Critical 9.8
• CVE-2017-1000375 Memory corruption in n/a Critical 9.8
• CVE-2017-1000378 Denial of service in n/a Critical 9.8
• CVE-2015-8212 Command injection in n/a Critical 9.8
• CVE-2008-3584 Denial of service in n/a Critical 9.3

All Netbsd Netbsd vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-q98h-p5jw-69g3.