LWN.net Logo

shadow: unauthorized modification of account information

Package(s):shadow CVE #(s):CAN-2004-1001
Created:November 4, 2004 Updated:November 23, 2004
Description: The shadow user account utilities have a potential problem with the chfn and chsh utilities that may allow unauthorized users to modify account properties.
Alerts:
Gentoo 200411-09 2004-11-04
Debian DSA-585-1 2004-11-05
Mandrake MDKSA-2004:126 2004-11-04
Ubuntu USN-17-1 2004-11-04
Conectiva CLA-2004:894 2004-11-23

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.