Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

coreutils: restriction bypass

Package(s): coreutils CVE #(s): CVE-2008-1946

Created: July 30, 2008 Updated: July 30, 2008

Description: The coreutils package fails to use PAM properly, allowing a local user (who knows the relevant password) to change to a locked or expired account with the su command.

Alerts:

Red Hat

RHSA-2008:0780-01

2008-07-24

(Log in to post comments)