{"api_version":"1","generated_at":"2026-07-22T23:42:25+00:00","cve":"CVE-2011-2467","urls":{"html":"https://cve.report/CVE-2011-2467","api":"https://cve.report/api/cve/CVE-2011-2467.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-2467","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2467"},"summary":{"title":"CVE-2011-2467","description":"SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-07-27 02:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.8","severity":"","vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","baseScore":5.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/45326","name":"http://secunia.com/advisories/45326","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Likewise Open lsassd Service SQL Injection Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/48816","name":"http://www.securityfocus.com/bid/48816","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Likewise Open lsassd Service SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/45276","name":"http://secunia.com/advisories/45276","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Likewise Open / Enterprise lsassd Service SQL Injection Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/","name":"http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Likewise Forum | [LWSA-2011-002] SQL Injection Issue","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68765","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68765","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt","name":"https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-1171-1","name":"http://www.ubuntu.com/usn/USN-1171-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-1171-1: Likewise Open vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748","name":"https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug #802748 “CVE-2011-2467: likewise-open local privilege escala...” : Bugs : likewise-open package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2467","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2467","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"2467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"6.0","cpe7":"*","cpe8":"enterprise","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"likewise","cpe5":"likewise_open","cpe6":"6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:00:33.987Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"45276","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/45276"},{"name":"USN-1171-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1171-1"},{"name":"45326","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/45326"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/"},{"name":"likewise-lsassd-sql-injection(68765)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68765"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt"},{"name":"48816","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/48816"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-07-12T00:00:00.000Z","descriptions":[{"lang":"en","value":"SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"45276","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/45276"},{"name":"USN-1171-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1171-1"},{"name":"45326","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/45326"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/"},{"name":"likewise-lsassd-sql-injection(68765)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68765"},{"tags":["x_refsource_CONFIRM"],"url":"https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt"},{"name":"48816","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/48816"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-2467","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"45276","refsource":"SECUNIA","url":"http://secunia.com/advisories/45276"},{"name":"USN-1171-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1171-1"},{"name":"45326","refsource":"SECUNIA","url":"http://secunia.com/advisories/45326"},{"name":"http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/","refsource":"CONFIRM","url":"http://www.likewise.com/community/index.php/forums/viewannounce/1212_6/"},{"name":"likewise-lsassd-sql-injection(68765)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68765"},{"name":"https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt","refsource":"CONFIRM","url":"https://launchpadlibrarian.net/74204969/LWSA-2011-002.txt"},{"name":"48816","refsource":"BID","url":"http://www.securityfocus.com/bid/48816"},{"name":"https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748","refsource":"CONFIRM","url":"https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/802748"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-2467","datePublished":"2011-07-27T01:29:00.000Z","dateReserved":"2011-06-07T00:00:00.000Z","dateUpdated":"2024-08-06T23:00:33.987Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-07-27 02:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","baseScore":5.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:5.4:*:*:*:*:*:*:*","matchCriteriaId":"695635C4-A067-4E4B-84B9-92185FD462B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:6.0:*:*:*:*:*:*:*","matchCriteriaId":"CC251E44-5986-4A07-BEF5-F0CF9DA7F537"},{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"3337E00D-AB69-44F8-8852-8523C0ACA97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:likewise:likewise_open:6.1:*:*:*:*:*:*:*","matchCriteriaId":"847B454D-9262-46DA-9298-E21633E9F852"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"2467","Ordinal":"1","Title":"CVE-2011-2467","CVE":"CVE-2011-2467","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"2467","Ordinal":"1","NoteData":"SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.","Type":"Description","Title":"CVE-2011-2467"},{"CveYear":"2011","CveId":"2467","Ordinal":"2","NoteData":"2011-07-26","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"2467","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}