CVE-2018-16588

CVE-2018-16588 affects the SUSE shadow package’s useradd.c code. Local attackers could exploit it by triggering creation of non-existing intermediate directories with world-writable mode 0777 during user creation, enabling privilege escalation. The impact is local, with high secrecy/ integrity/ a...

CVE-2018-16588

Privilege escalation can occur in the SUSE useradd.c code in useradd, as distributed in the SUSE shadow package through 4.2.1-27.9.1 for SUSE Linux Enterprise 12 SLE-12 and through 4.5-5.39 for SUSE Linux Enterprise 15 SLE-15. Non-existing intermediate directories are created with mode 0777 durin...

Security update for shadow (moderate)

This update for shadow fixes the following security issue: - CVE-2018-16588: Prevent useradd from creating intermediate directories with mode 0777 bsc1106914 This update was imported from the SUSE:SLE-12-SP2:Update update project...

Security update for shadow (moderate)

This update for shadow fixes the following security issue: - CVE-2018-16588: Prevent useradd from creating intermediate directories with mode 0777 bsc1106914 This update was imported from the SUSE:SLE-15:Update update project...

SUSE SLED12 / SLES12 Security Update : shadow (SUSE-SU-2018:2835-1)

This update for shadow fixes the following security issue : Prevent useradd from creating intermediate directories with mode 0777 bsc1106914 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Solaris EXTREMEPARR dtappgather Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Solaris 'EXTREMEPARR' dtappgather Privilege Escalation", 'Description' = %q This module exploits a directory traversal vulnerability in the...

Solaris - 'EXTREMEPARR' dtappgather Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Solaris 'EXTREMEPARR' dtappgather Privilege Escalation", 'Description' = %q This module exploits a directory traversal vulnerability in the...

SUSE-SU-2018:2835-1 Security update for shadow

This update for shadow fixes the following security issue: - Prevent useradd from creating intermediate directories with mode 0777 bsc1106914...

SUSE-SU-2018:2834-1 Security update for shadow

This update for shadow fixes the following security issue: - Prevent useradd from creating intermediate directories with mode 0777 bsc1106914...

CVE-2018-16588

Privilege escalation can occur in the SUSE useradd.c code in useradd, as distributed in the SUSE shadow package through 4.2.1-27.9.1 for SUSE Linux Enterprise 12 SLE-12 and through 4.5-5.39 for SUSE Linux Enterprise 15 SLE-15. Non-existing intermediate directories are created with mode 0777 durin...

Photon OS 2.0: Binutils / File / Linux / Shadow PHSA-2018-2.0-0080 (deprecated)

An update of 'binutils', 'file', 'shadow' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0080. The text itself is copyrigh...

Photon OS 1.0: Rsyslog / Shadow PHSA-2017-0030 (deprecated)

An update of rsyslog,shadow packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0030. The text itself is copyright C VMware, Inc...

Photon OS 1.0: Glibc / Shadow / Systemd / Wget PHSA-2017-0023 (deprecated)

An update of systemd,wget,shadow,glibc packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0023. The text itself is copyright C...

Photon OS 1.0: Binutils / File / Linux / Pcre / Shadow PHSA-2018-1.0-0171 (deprecated)

An update of 'shadow', 'binutils', 'pcre', 'file' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0171. The text itself is...

TSMC Chip Maker Blames WannaCry Malware for Production Halt

Taiwan Semiconductor Manufacturing Company TSMC—the world's largest makers of semiconductors and processors—was forced to shut down several of its chip-fabrication factories over the weekend after being hit by a computer virus. Now, it turns out that the computer virus outbreak at Taiwan chipmake...

Important Photon OS Security Update - PHSA-2018-0171

Updates of 'file', 'shadow', 'pcre', 'binutils' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0171

An update of 'shadow', 'binutils', 'pcre', 'file' packages of Photon OS has been released...

Moderate Photon OS Security Update - PHSA-2018-0080

Updates of 'file', 'shadow', 'binutils' packages of Photon OS have been released...

openSUSE Security Update : shadow (openSUSE-2018-770)

This update for shadow fixes the following issues : - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE: Security Advisory for shadow (openSUSE-SU-2018:2127-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...