Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-1001
HistoryMar 01, 2005 - 12:00 a.m.

CVE-2004-1001

2005-03-0100:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and
possibly other versions before 4.0.5, allows local users to conduct
unauthorized activities when an error from a pam_chauthtok function call is
not properly handled.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchshadow< 4.0.13-7ubuntu3.2UNKNOWN
ubuntu6.10noarchshadow< 4.0.16-2ubuntu4UNKNOWN
ubuntu7.04noarchshadow< 4.0.16-2ubuntu4UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%