13 matches found
EUVD-2011-0735
Malware in sbrugna...
DLA-4130-1 shadow - security update
Bulletin has no description...
SUSE-SU-2024:2658-1 Security update for shadow
This update for shadow fixes the following issues: - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845...
SUSE-SU-2023:4027-1 Security update for shadow
This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...
SUSE CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
SUSE-SU-2018:1997-2 Security update for shadow
This update for shadow fixes the following issues: - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310...
SUSE-SU-2018:2835-1 Security update for shadow
This update for shadow fixes the following security issue: - Prevent useradd from creating intermediate directories with mode 0777 bsc1106914...
Shadow Denial of Service Vulnerability
shadow is a suite of tools for maintaining Debian systems. A security vulnerability exists in versions of shadow prior to 4.5. An attacker could exploit this vulnerability with malformed input to cause the suite to crash buffer overflow or memory corruption...
DLA-838-1 shadow - security update
Bulletin has no description...
DSA-3793-1 shadow - security update
Bulletin has no description...
CVE-2011-0721
Multiple CRLF injection vulnerabilities in 1 chfn and 2 chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field...
CVE-2004-1001
Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...
[SA13028] Shadow "passwd_check()" Security Bypass Vulnerability
TITLE: Shadow "passwdcheck" Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13028 VERIFY ADVISORY: http://secunia.com/advisories/13028/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: Shadow 4.x http://secunia.com/product/4190/ DESCRIPTION: Martin Schulze has...