Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

shadow: unauthorized modification of account information

Package(s):

shadow

CVE #(s):

CAN-2004-1001

Created:

November 4, 2004

Updated:

November 23, 2004

Description:

The shadow user account utilities have a potential problem with the chfn and chsh utilities that may allow unauthorized users to modify account properties.

Alerts:

Conectiva	CLA-2004:894	2004-11-23
Ubuntu	USN-17-1	2004-11-04
Mandrake	MDKSA-2004:126	2004-11-04
Debian	DSA-585-1	2004-11-05
Gentoo	200411-09	2004-11-04

(Log in to post comments)