CVE ID:	CVE-2010-0015
Description:	nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function.
Test IDs:	1.3.6.1.4.1.25623.1.0.66770
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0015 MDVSA-2010:111 http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 MDVSA-2010:112 http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 SUSE-SA:2010:052 https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html [oss-security] 20100107 CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/07/3 [oss-security] 20100108 Re: CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/08/1 [oss-security] 20100109 Re: CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/08/2 [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage http://marc.info/?l=oss-security&m=126320356003425&w=2 [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage http://marc.info/?l=oss-security&m=126320570505651&w=2 [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage http://www.openwall.com/lists/oss-security/2010/01/11/6 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333 http://sourceware.org/bugzilla/show_bug.cgi?id=11134 http://sourceware.org/bugzilla/show_bug.cgi?id=11134 http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup