SUSE linux chfn utility privilege escalation
Published:		05.11.2005
Source:		BUGTRAQ
SecurityVulns ID:		5424
Type:		local
Level:		6/10
Description:		Gecos field is not checked, making it possible to add records to password file.

Affected:		SUSE : SUSE LINUX 9.3
		SUSE : SUSE LINUX 10.0
		SUSE : SUSE LINUX 9.2
		SUSE : SUSE LINUX 9.1
		SUSE : SUSE LINUX 9.0
		SUSE : SuSE Linux Desktop 1.0
		SUSE : SuSE Linux Enterprise Server 8
		SUSE : SUSE SLES 9
		SUSE : UnitedLinux 1.0

Original document

SUSE, SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064) (05.11.2005)

Discuss:

Read or add your comments to this news (0 comments)