Mandrake usermode utilities unauthorized access

Any user can halt/reboot system and obtain root shell from console...

MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: usermode Advisory ID: MDKSA-2003:031 Date: March 12th, 2003 Affected versions: 8.1, 8.2, 9.0, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: The /usr/bin/shutdown command tha...

MDKSA-2000:020 usermode update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: usermode Date: July 18th, 2000 Advisory ID: MDKSA-2000:020 Affected versions: 7.1 Problem Description: A bug existed in the usermode package that permitted users to reboot or halt the system withou...