CVE-2022-0563

A flaw was found in the Linux kernel’s util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message...

Denial Of Service (DoS)

libuser is vulnerable to denial of service DoS attacks. The vulnerability exists as an incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of...

Webmin <= 1.540 Cross Site Scripting

According to its self-reported version, the Webmin install hosted on the remote host is 1.540 or lower. It is, therefore, affected by a cross site scripting vulnerability via a chfn command. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108554; scriptversion"1.5";...

Mageia: Security Advisory (MGASA-2015-0352)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated util-linux packages fix CVE-2015-5224

Updated util-linux packages fix security vulnerability: The chfn and chsh commands in util-linux's login-utils are vulnerable to a file name collision due to incorrect mkstemp usage. If the chfn and chsh binaries are both setuid-root they eventually call mkostemp in such a way that an attacker...

CVE-2015-3245

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service /etc/passwd corruption via a newline character in the GECOS field...

UBUNTU-CVE-2015-3245

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service /etc/passwd corruption via a newline character in the GECOS field...

CVE-2015-3245: Improper Input Validation

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service /etc/passwd corruption via a newline character in the GECOS field...

Libuser Library - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary ----------------------------------------------------------------- The libuser library implements a standardized interface for manipulating and...

Libuser Library - Multiple Vulnerabilities

Libuser Library - Multiple Vulnerabilities Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary ----------------------------------------------------------------- The libuser library implements a standardized interface for...

Libuser Library - Multiple Vulnerabilities

Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary ----------------------------------------------------------------- The libuser library implements a standardized interface for manipulating and administering user and grou...

libuser: does not filter newline characters in the GECOS field

It was found that libuser, as used by the chfn userhelper functionality, did not properly filter out newline characters in GECOS fields. A local, authenticated user could use this flaw to corrupt the /etc/passwd file, resulting in a denial-of-service on the system...

Qualys Security Advisory - userhelper / libuser

Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary ----------------------------------------------------------------- The libuser library implements a standardized interface for manipulating and administering user and grou...

Apple Directory Services Memory Corruption

No description provided by source. Apple Directory Services Memory Corruption CVE-2010-1840 INTRODUCTION chfn, chpass and chsh dos not properly parse authname switch -u, which causes the applications to crash when parsing a long string. Those binaries are setuid root by default. This problem was...

OpenBSD 2.x/3.x CHPass Temporary File Link File Content Revealing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6748/info It has been reported that a problem with chpass included with OpenBSD may allow local users to gain access to the content of specific files. This vulnerability requires that lines in the target file be construct...

SuSE Linux <= 9.3, 10 (chfn) Local Root Privilege Escalation Exploit

No description provided by source. !/bin/sh Exploit for SuSE Linux 9.1,2,3/10.0, Desktop 1.0, UnitedLinux 1.0 and SuSE Linux Enterprise Server 8,9 'chfn' local root bug. by Hunger [email protected] Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html hunger@suse: id...

Mandriva Linux Security Advisory : webmin (MDVSA-2011:109)

A vulnerability was discovered and corrected in webmin : Cross-site scripting XSS vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real aka Full Name field, related to useradmin/index.cgi and...

CVE-2011-1937

Cross-site scripting XSS vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real aka Full Name field, related to useradmin/index.cgi and useradmin/user-lib.pl...

CVE-2011-1937: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real aka Full Name field, related to useradmin/index.cgi and useradmin/user-lib.pl...

Debian Security Advisory DSA 2164-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 2164-1. OpenVAS Vulnerability Test $Id: deb21641.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2164-1 shadow Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...