Ubuntu Update for shadow vulnerability USN-695-1

Ubuntu Update for Linux kernel vulnerabilities USN-695-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6951.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for shadow vulnerability USN-695-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

USN-695-1: shadow vulnerability

Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...