Debian DSA-585-1 : shadow - programming error

A vulnerability has been discovered in the shadow suite which provides programs like chfn and chsh. It is possible for a user, who is logged in but has an expired password to alter his account information with chfn or chsh without having to change the password. The problem was originally thought ...

[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour

-------------------------------------------------------------------------- Debian Security Advisory DSA 585-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour

-------------------------------------------------------------------------- Debian Security Advisory DSA 585-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2004 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : shadow-utils (MDKSA-2004:126)

A vulnerability in the shadow suite was discovered by Martin Schulze that can be exploited by local users to bypass certain security restrictions due to an input validation error in the passwdcheck function. This function is used by the chfn and chsh tools. The updated packages have been patched ...

DSA-585-1 shadow - programming error

Bulletin has no description...

GLSA-200411-09 : shadow: Unauthorized modification of account information

The remote host is affected by the vulnerability described in GLSA-200411-09 shadow: Unauthorized modification of account information Martin Schulze reported a flaw in the passwdcheck function in 'libmisc/pwdcheck.c' which is used by chfn and chsh. Impact : A logged-in local user with an expired...

CVE-2004-1001

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

CVE-2004-1001

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

CVE-2004-1001

CVE-2004-1001 affects Shadow’s passwd_check in version 4.0.4.1 (and possibly earlier than 4.0.5). A local user can perform unauthorized activities when an error from pam_chauthtok is not properly handled. The issue is local in scope with partial confidentiality/integrity/availability impact as pe...

shadow: Unauthorized modification of account information

Background shadow provides a set of utilities to deal with user accounts. Description Martin Schulze reported a flaw in the passwdcheck function in "libmisc/pwdcheck.c" which is used by chfn and chsh. Impact A logged-in local user with an expired password may be able to use chfn and chsh to chang...

shadow privilege escalation

It's possible to change account properties...

[SA13028] Shadow "passwd_check()" Security Bypass Vulnerability

TITLE: Shadow "passwdcheck" Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13028 VERIFY ADVISORY: http://secunia.com/advisories/13028/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: Shadow 4.x http://secunia.com/product/4190/ DESCRIPTION: Martin Schulze has...

Debian DSA-421-1 : mod-auth-shadow - password expiration

David B Harris discovered a problem with mod-auth-shadow, an Apache module which authenticates users against the system shadow password database, where the expiration status of the user's account and password were not enforced. This vulnerability would allow an otherwise authorized user to...

Debian DSA-015-1 : sash - broken maintainer script

Versions of the sash package prior to 3.4-4 did not clone /etc/shadow properly, causing it to be made world-readable. This package only exists in stable, so if you are running unstable you won't see a bugfix unless you use the resources from the bottom of this message to the proper configuration...

linux/x86 chmod 666 /etc/shadow 82 bytes

linux/x86 chmod 666 /etc/shadow 82 bytes. Shellcode exploit for linx86 platform / [email protected] Usando execve y un array de punteros include main char name4; name0="/bin/chmod"; name1="666"; name2="/etc/shadow"; name3=NULL; execvename0,name,NULL; / include char shellcode= "\xeb\x31" /...

linux/x86 chmod 666 shadow ENCRYPT 75 bytes

No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x17abril0x7d2 !!!!! ENCRIPTADA !!!!! 75 bytes chmod 666 /etc/shadow !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue http://www.shellcode.com.ar/Projects/JempiScodesversion.tgz !!!!!! ANTI IDS...

linux/x86 chmod 666 shadow ENCRYPT 75 bytes

linux/x86 chmod 666 shadow ENCRYPT 75 bytes. Shellcode exploit for linx86 platform / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x17abril0x7d2 !!!!! ENCRIPTADA !!!!! 75 bytes chmod 666 /etc/shadow !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...

linux/x86 chmod 666 /etc/shadow 41 bytes

linux/x86 chmod 666 /etc/shadow 41 bytes. Shellcode exploit for linx86 platform / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas...

linux/x86 chmod 666 /etc/shadow 41 bytes

No description provided by source. / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas modificaciones en el codigo y solo pude reducir la...

linux/x86 chmod 666 /etc/shadow 41 bytes

Exploit for linux/x86 platform in category shellcode ======================================== linux/x86 chmod 666 /etc/shadow 41 bytes ======================================== / email protected 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod,...