CVE-2015-3246

CVE-2015-3246 affects the libuser library (shipped in the usermode package on RHEL, CentOS, Fedora, and Debian), where it directly modifies /etc/passwd without adequate error handling. An error during modification can leave the file in an inconsistent state , causing a denial of service. When com...

CentOS Update for libuser CESA-2015:1483 centos7

Check the version of libuser SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882230";...

Scientific Linux Security Update : libuser on SL6.x i386/x86_64 (20150723)

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser for example, userhelper to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate the...

openSUSE Security Update : libuser (openSUSE-2015-529)

libuser was updated to fix on security issue. The following vulnerability was fixed : - CVE-2015-3246: local root exploit through passwd file handling boo937533 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Security update for libuser (important)

libuser was updated to fix on security issue. The following vulnerability was fixed: CVE-2015-3246: local root exploit through passwd file handling boo937533...

Fedora 21 : libuser-0.62-1.fc21 (2015-12064)

Security fix for CVE-2015-3245, CVE-2015-3246 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

OracleVM 3.3 : libuser (OVMSA-2015-0106)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update CVE-2015-3246 patch based on review comments Resolves: 1235518 - Don&rsquo t use 512-bit RSA private keys in tests Related: 1235518 - Fix testsuite failures if more than one architecture is...

Fedora 22 : libuser-0.62-1.fc22 (2015-12301)

Security fix for CVE-2015-3245, CVE-2015-3246 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Oracle Linux 6 : libuser (ELSA-2015-1482)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1482 advisory. - Update CVE-2015-3246 patch based on review comments Resolves: 1235518 Tenable has extracted the preceding description block directly from the Oracle...

libuser security update

0.56.13-8 - Update CVE-2015-3246 patch based on review comments Resolves: 1235518 0.56.13-7 - Dont use 512-bit RSA private keys in tests Related: 1235518 - Fix testsuite failures if more than one architecture is building concurrently Related: 1235518 0.56.13-6 - Fix CVE-2015-3246 Resolves: 123551...

CentOS 6 : libuser (CESA-2015:1482)

Updated libuser packages that fix two security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...

Libuser Library - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary ----------------------------------------------------------------- The libuser library implements a standardized interface for manipulating and...

Libuser Library - Multiple Vulnerabilities

Libuser Library - Multiple Vulnerabilities Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary ----------------------------------------------------------------- The libuser library implements a standardized interface for...

Scientific Linux Security Update : libuser on SL7.x x86_64 (20150723)

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser for example, userhelper to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate the...

CVE-2015-3246

creationtimestamp| type| source ---|---|--- 2015-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37706 2018-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44633 2018-05-29 15:50:33+00:00| seen|...

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser

Hello, it is July 23, 2015, 17:00 UTC, the Coordinated Release Date for CVE-2015-3245 and CVE-2015-3246. Please find our advisory below, and our exploit attached. Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary...

Updated libuser package fixes security vulnerabilities

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser for example, userhelper to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate the...

libuser security update

CentOS Errata and Security Advisory CESA-2015:1483 Updated libuser packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Oracle Linux 7 : libuser (ELSA-2015-1483)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1483 advisory. - Update CVE-2015-3246 patch based on review comments Resolves: 1235519 Tenable has extracted the preceding description block directly from the Oracle...

RHEL 6 : libuser (RHSA-2015:1482)

Updated libuser packages that fix two security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...