[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour

-------------------------------------------------------------------------- Debian Security Advisory DSA 585-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2004 http://www.debian.org/security/faq -...

USN-17-1: passwd vulnerability

Martin Schulze and Steve Grubb discovered a flaw in the authentication input validation of the "chfn" and "chsh" programs. This allowed logged in users with an expired password to change their real name and their login shell without having to change their password. This flaw cannot lead to...

DSA-585-1 shadow - programming error

Bulletin has no description...

GLSA-200411-09 : shadow: Unauthorized modification of account information

The remote host is affected by the vulnerability described in GLSA-200411-09 shadow: Unauthorized modification of account information Martin Schulze reported a flaw in the passwdcheck function in 'libmisc/pwdcheck.c' which is used by chfn and chsh. Impact : A logged-in local user with an expired...

shadow: Unauthorized modification of account information

Background shadow provides a set of utilities to deal with user accounts. Description Martin Schulze reported a flaw in the passwdcheck function in "libmisc/pwdcheck.c" which is used by chfn and chsh. Impact A logged-in local user with an expired password may be able to use chfn and chsh to chang...

CVE-2004-0540

CVE-2004-0540 affects Microsoft Windows 2000 domain authentication: if the domain FQDN is exactly eight characters, the system does not prevent logons by users with expired passwords, constituting an authentication bypass in the domain logon flow. The connected advisory (CPAI-2015-0384) corrobora...

NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963767 Title: Remote Manager Security Issue - eDir 8.6.2 Date: 22-Oct-2002 Revision: Original Product Name: Novell eDirectory 8.6...