{"api_version":"1","generated_at":"2026-07-23T03:12:00+00:00","cve":"CVE-2011-1786","urls":{"html":"https://cve.report/CVE-2011-1786","api":"https://cve.report/api/cve/CVE-2011-1786.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1786","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1786"},"summary":{"title":"CVE-2011-1786","description":"lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-05-03 22:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/47625","name":"http://www.securityfocus.com/bid/47625","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Likewise 'lsassd' Service Remote Denial of Service Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","name":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","name":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMSA-2011-0007","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/8240","name":"http://securityreason.com/securityalert/8240","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CXSecurity - IDS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://kb.vmware.com/kb/1035108","name":"http://kb.vmware.com/kb/1035108","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VMware KB:     VMware ESXi 4.1 Patch ESXi410-201104401-SG: Updates Firmware","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/","name":"http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Likewise Forum | [LWSA-2011-001] Lsassd Remote DoS","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/44349","name":"http://secunia.com/advisories/44349","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Likewise Open / Enterprise lsassd Service Denial of Service Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67194","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67194","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1025452","name":"http://securitytracker.com/id?1025452","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VMware ESXi and ESX Socket Consumption and Likewise Login Bug Let Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","name":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[Security-announce] VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1786","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1786","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1786","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"5.3","cpe7":"*","cpe8":"enterprise","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1786","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1786","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"6.0","cpe7":"*","cpe8":"enterprise","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1786","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"esx","cpe6":"4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1786","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"esxi","cpe6":"4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:37:25.835Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/"},{"name":"1025452","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1025452"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://kb.vmware.com/kb/1035108"},{"name":"44349","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/44349"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html"},{"name":"likewise-lsaad-dos(67194)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67194"},{"name":"[security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html"},{"name":"47625","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/47625"},{"name":"20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded"},{"name":"8240","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/8240"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-04-28T00:00:00.000Z","descriptions":[{"lang":"en","value":"lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/"},{"name":"1025452","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1025452"},{"tags":["x_refsource_CONFIRM"],"url":"http://kb.vmware.com/kb/1035108"},{"name":"44349","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/44349"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html"},{"name":"likewise-lsaad-dos(67194)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67194"},{"name":"[security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html"},{"name":"47625","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/47625"},{"name":"20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded"},{"name":"8240","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/8240"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-1786","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/","refsource":"CONFIRM","url":"http://www.likewise.com/community/index.php/forums/viewannounce/1104_27/"},{"name":"1025452","refsource":"SECTRACK","url":"http://securitytracker.com/id?1025452"},{"name":"http://kb.vmware.com/kb/1035108","refsource":"CONFIRM","url":"http://kb.vmware.com/kb/1035108"},{"name":"44349","refsource":"SECUNIA","url":"http://secunia.com/advisories/44349"},{"name":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html"},{"name":"likewise-lsaad-dos(67194)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67194"},{"name":"[security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","refsource":"MLIST","url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html"},{"name":"47625","refsource":"BID","url":"http://www.securityfocus.com/bid/47625"},{"name":"20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded"},{"name":"8240","refsource":"SREASON","url":"http://securityreason.com/securityalert/8240"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-1786","datePublished":"2011-05-03T22:00:00.000Z","dateReserved":"2011-04-19T00:00:00.000Z","dateUpdated":"2024-08-06T22:37:25.835Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-05-03 22:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:5.3:*:enterprise:*:*:*:*:*","matchCriteriaId":"ED105F9A-DEE1-48E8-B929-6462CDFE16E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:6.0:*:*:*:*:*:*:*","matchCriteriaId":"CC251E44-5986-4A07-BEF5-F0CF9DA7F537"},{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"3337E00D-AB69-44F8-8852-8523C0ACA97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4D3C6FC4-DAE3-42DB-B845-593BBD2A50BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:4.1:*:*:*:*:*:*:*","matchCriteriaId":"73C9E205-87EE-4CE2-A252-DED7BB6D4EAE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1786","Ordinal":"1","Title":"CVE-2011-1786","CVE":"CVE-2011-1786","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1786","Ordinal":"1","NoteData":"lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.","Type":"Description","Title":"CVE-2011-1786"},{"CveYear":"2011","CveId":"1786","Ordinal":"2","NoteData":"2011-05-03","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"1786","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}