A vulnerability has been reported in Likewise-CIFS and Likewise Open, which can be exploited by malicious, local users to bypass certain security features.

The vulnerability is caused due to a logic error within the pam_lsass library when restricting access to the lsassd local-provider account if the password for this account is expired. This can be exploited to log in as lsassd local-provider without having to enter the correct password.

Successful exploitation requires that the library is run under the context of a root service.

The vulnerability is reported in Likewise Open 5.4 (prior to build 8046), Likewise-CIFS 5.4 (prior to build 8046), and Likewise Open 6.0 (prior to build 8234) for Linux, OS X, Solaris, HP-UX, AIX, and FreeBSD.

Solution
Update to Likewise Open 5.4 build 8046, Likewise-CIFS 5.4 build 8046, or Likewise Open 6.0 build 8234 or later.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Matt Weatherford, University of Washington.

Original Advisory
LWSA-2010-001:
http://www.likewise.com/community/index.php/forums/viewthread/772/

Deep Links
Links available to Secunia VIM customers