CVE-2011-0721

2011-02-1500:00:00

ubuntu.com

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

74.4%

JSON

Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow
1:4.1.4 allow local users to add new users or groups to /etc/passwd via the
GECOS field.

Notes

Author	Note
kees	introduce in the upstream 4.1.2 changes https://alioth.debian.org/scm/viewvc.php?view=rev&root=pkg-shadow&revision=1978

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchshadow< 1:4.1.4.1-1ubuntu2.2UNKNOWN
ubuntu10.04noarchshadow< 1:4.1.4.2-1ubuntu2.2UNKNOWN
ubuntu10.10noarchshadow< 1:4.1.4.2-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.10	noarch	shadow	< 1:4.1.4.1-1ubuntu2.2	UNKNOWN
ubuntu	10.04	noarch	shadow	< 1:4.1.4.2-1ubuntu2.2	UNKNOWN
ubuntu	10.10	noarch	shadow	< 1:4.1.4.2-1ubuntu3.2	UNKNOWN