36 matches found
shadow lifting vulnerability
shadow is a suite of tools for maintaining Debian systems. A security vulnerability exists in shadow version 4.8. An attacker has exploited this vulnerability to gain root privileges...
UBUNTU-CVE-2019-19882
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing...
DEBIAN-CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...
Shadow has an unspecified vulnerability (CNVD-2016-05634)
Shadow is a suite of tools for maintaining Debian systems. An unspecified vulnerability exists in Shadow. An attacker could exploit this vulnerability to obtain sensitive information and execute arbitrary code on the affected application. A denial of service is also possible...
DEBIAN-CVE-2011-0721
Multiple CRLF injection vulnerabilities in 1 chfn and 2 chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field...
Ubuntu Update for shadow vulnerability USN-1065-1
Ubuntu Update for Linux kernel vulnerabilities USN-1065-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10651.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for shadow vulnerability USN-1065-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
[USN-1065-1] shadow vulnerability
=========================================================== Ubuntu Security Notice USN-1065-1 February 15, 2011 shadow vulnerability CVE-2011-0721 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 Ubuntu 10.04 LTS Ubunt...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : shadow vulnerability (USN-695-1)
Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...
Ubuntu Update for shadow vulnerability USN-695-1
Ubuntu Update for Linux kernel vulnerabilities USN-695-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6951.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for shadow vulnerability USN-695-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu 5.04 / 5.10 / 6.06 LTS : shadow vulnerability (USN-308-1)
Ilja van Sprundel discovered that passwd, when called with the -f, -g, or -s option, did not check the result of the setuid call. On systems that configure PAM limits for the maximum number of user processes, a local attacker could exploit this to execute chfn, gpasswd, or chsh with root...
CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
DEBIAN-CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
GLSA-200411-09 : shadow: Unauthorized modification of account information
The remote host is affected by the vulnerability described in GLSA-200411-09 shadow: Unauthorized modification of account information Martin Schulze reported a flaw in the passwdcheck function in 'libmisc/pwdcheck.c' which is used by chfn and chsh. Impact : A logged-in local user with an expired...
Debian DSA-015-1 : sash - broken maintainer script
Versions of the sash package prior to 3.4-4 did not clone /etc/shadow properly, causing it to be made world-readable. This package only exists in stable, so if you are running unstable you won't see a bugfix unless you use the resources from the bottom of this message to the proper configuration...