RHEL 3 : shadow-utils (RHSA-2007:0431)

An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

shadow security update

CentOS Errata and Security Advisory CESA-2007:0431 An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary program...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

security flaw

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

Low: shadow-utils security and bug fix update

2:4.0.3-61.RHEL4 - fix comment in /etc/login.defs 188263 - faster faillog reset 177017 - do not strip binaries 176949 - fix mailbox creation race condition 193053...

Sun Microsystems Solaris SRSEXEC 3.2.x - Arbitrary File Read Local Information Disclosure

source: https://www.securityfocus.com/bid/23915/info Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error. A local attacker may exploit this issue to access sensitive information, including superuser password information, that may lead to further...

shadow security update

CentOS Errata and Security Advisory CESA-2007:0276 Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs f...

RHEL 4 : shadow-utils (RHSA-2007:0276)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2007:0276 advisory. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow password format, as well as programs for...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

Unfixed XSS vulnerability at shadow-webservice.com

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting shadow-webservice.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. Cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. The introduction of any technology is associated with costs and risks in one way or another. This applies to backup as much a...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. Cluster systems A cluster is several computers nodes functioning as a single system that can work even if one of the nodes...

CVE-2006-6683

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM...

CVE-2002-2219

The CVE pertains to chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd prior to version 2.1, where a flaw in the handling of a long user ID field enables remote disclosure of the last line of the /etc/shadow file. The vulnerability is an information disclosure via an unintended read of shadow data, ...

linux/x86 chmod 0666 /etc/shadow 36 bytes

No description provided by source. / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit: Remove the last 5 bytes 0x6a - 0x80 section .text global start start: xor edx, edx push byte 15 pop eax push edx push byte 0x77 push word 0x6f64...

linux/x86 chmod 0666 /etc/shadow 36 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 chmod 0666 /etc/shadow 36 bytes ========================================= / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit:...

INCA IM-204 Dsl several vulnerabilities

======================================== INCA IM-204 Dsl several vulnerabilities ======================================== Found By CrackersChild crackerschild at sibersavascilar dot com email concealed ========================================== Directory transversal...

phpBB Shadow Prmod模块phpbb_root_path远程文件包含漏洞

phpBB是非常流行的WEB论坛程序。 phpBB的Shadow Prmod模块处理用户请求时存在输入验证，远程攻击者可能利用此漏洞以Web进程权限在服务器上执行任意命令。 Shadow Prmod模块的includes/functionsportal.php脚本没有正确验证phpbbrootpath参数的输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。 phpBB Group Shadow Prémod 2.7.1 厂商补丁： phpBB Group -----------...