Mandrake Linux Security Advisory : usermode (MDKSA-2003:031-1)

The /usr/bin/shutdown command that comes with the usermode package can be executed by local users to shutdown all running processes and drop into a root shell. This command is not really needed to shutdown a system, so it has been removed and all users are encouraged to upgrade. Please note that...

MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: usermode Advisory ID: MDKSA-2003:031 Date: March 12th, 2003 Affected versions: 8.1, 8.2, 9.0, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: The /usr/bin/shutdown command tha...

CVE-2002-0294

Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system...

CVE-2002-0294

The CVE-2002-0294 entry concerns Alcatel 4400. The affected component is the /chetc/shutdown command which is installed with setgid privileges. The underlying issue is privilege escalation by assigning setgid to a program used for system shutdown, enabling local users to shut down the system (imp...

CVE-1999-1348

Technical details about CVE-1999-1348 are not publicly provided in the supplied documents. Monitor for updates; the available records describe the issue at a high level without specific impact, affected products, or remediation.

CVE-1999-1348: Undefined Security Weakness

Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service...

CVE-2000-0414

The CVE-2000-0414 entry describes a local privilege escalation in HP-UX 11.X/10.X caused by a flaw in the shutdown command’s handling of input variables. A local attacker could exploit malformed input to gain elevated privileges. The available sources confirm the affected component (shutdown comm...

CVE-2000-0414

Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables...

CVE-2000-0414: Undefined Security Weakness

Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables...