shadow security update

CentOS Errata and Security Advisory CESA-2007:0431 An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary program...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

security flaw

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

Low: shadow-utils security and bug fix update

2:4.0.3-61.RHEL4 - fix comment in /etc/login.defs 188263 - faster faillog reset 177017 - do not strip binaries 176949 - fix mailbox creation race condition 193053...

Sun Microsystems Solaris SRSEXEC 3.2.x - Arbitrary File Read Local Information Disclosure

source: https://www.securityfocus.com/bid/23915/info Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error. A local attacker may exploit this issue to access sensitive information, including superuser password information, that may lead to further...

shadow security update

CentOS Errata and Security Advisory CESA-2007:0276 Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs f...

RHEL 4 : shadow-utils (RHSA-2007:0276)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2007:0276 advisory. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow password format, as well as programs for...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

Unfixed XSS vulnerability at shadow-webservice.com

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting shadow-webservice.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. Cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. The introduction of any technology is associated with costs and risks in one way or another. This applies to backup as much a...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. Cluster systems A cluster is several computers nodes functioning as a single system that can work even if one of the nodes...

CVE-2006-6683

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM...

CVE-2002-2219

The CVE pertains to chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd prior to version 2.1, where a flaw in the handling of a long user ID field enables remote disclosure of the last line of the /etc/shadow file. The vulnerability is an information disclosure via an unintended read of shadow data, ...

CVE-2002-2219: Undefined Security Weakness

chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user userid field...

CVE-2006-6683: Undefined Security Weakness

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM...

linux/x86 chmod 0666 /etc/shadow 36 bytes

No description provided by source. / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit: Remove the last 5 bytes 0x6a - 0x80 section .text global start start: xor edx, edx push byte 15 pop eax push edx push byte 0x77 push word 0x6f64...

linux/x86 chmod 0666 /etc/shadow 36 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 chmod 0666 /etc/shadow 36 bytes ========================================= / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit:...

INCA IM-204 Dsl several vulnerabilities

======================================== INCA IM-204 Dsl several vulnerabilities ======================================== Found By CrackersChild crackerschild at sibersavascilar dot com email concealed ========================================== Directory transversal...