VULNERABILITY INTELLIGENCE
CVE-2009-2482
CVSS score6.9 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2009-07-16
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.