passwd / shadow vulnerabilities updated since 17.02.2011
Published:		18.02.2011
Source:		BUGTRAQ
SecurityVulns ID:		11444
Type:		local
Level:		5/10
Description:		It's possible to inject newlines into /etc/passwd

Affected:		DEBIAN : passwd 4.1
CVE:		CVE-2011-0721 (Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.)

Original document		DEBIAN, [SECURITY] [DSA 2164-1] shadow security update (17.02.2011)
		UBUNTU, [USN-1065-1] shadow vulnerability (17.02.2011)

Discuss:

Read or add your comments to this news (0 comments)