CVE-2001-1147

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pamlimits...

[RHSA-2001:095-04] New util-linux packages available to fix vipw permissions problems

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New util-linux packages available to fix vipw permissions problems Advisory ID: RHSA-2001:095-04 Issue date: 2001-07-12 Updated on: 2001-07-16 Product: Red Hat Linux Keywords:...

Moderate: Red Hat Security Advisory: : New util-linux packages available to fix vipw permissions problems

New util-linux packages are available for Red Hat Linux 7.1. These packages fix a problem where vipw would leave the /etc/shadow file world-readable after editing it. It is recommended that all users update to the fixed packages. Also, if you have used vipw on Red Hat Linux 7.1 before, make sure ...

format bug in agetty ??

util-linux-2.10h/login-utils agetty.c:244 ifdef DEBUGGING define debugs fprintfdbf,s; fflushdbf FILE dbf; else define debugs / nothing / endif agetty.c:281 ifdef DEBUGGING dbf = fopen"/dev/ttyp0", "w"; int i; fori = 1; i argc; i++ debugargvi; endif w/ -DDEBUGGING is bogus. -- Carlos E Gorges...

CVE-1999-0661

CVE-1999-0661 involves multiple widely-used packages (TCP Wrappers 7.6, util-linux 2.9g, wuftpd 2.2 and 2.1f, ircII 2.2.9, OpenSSH 3.4p1, Sendmail 8.12.6) that were replaced at distribution points by a Trojan Horse. The Red Hat advisory and other records corroborate the same core issue: compromis...

CVE-1999-0661

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

trojan-backdoor-ftp.win.tue.nl.txt

Date: Sun, 24 Jan 1999 09:03:42 -0500 From: Trevor Johnson To: [email protected] Subject: Re: util-linux compromised I just received the following letter: Date: Sun, 24 Jan 1999 04:01:55 -0500 EST From: John Stange Subject: util-linux compromised? I grabbed util-linux-2.9g yesterday from...