shadow vulnerabilities (Debian)
20 vulnerabilities.
-
shadowDebian shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g.,... 3.6 Low -
shadowDebian Shadow-utils: possible password leak during passwd(1) change 4.7 Medium -
shadowDebian In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID... 3.3 Low -
shadowDebian The Debian shadow package before 4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical... 7.8 High -
shadowDebian shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux,... 7.8 High -
shadowDebian shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees 4.7 Medium -
shadowDebian There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -... 7.8 High -
shadowDebian An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an... 5.3 Medium -
shadowDebian In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in... 9.8 Critical -
shadowDebian shadow - regression update No score -
shadowDebian A race condition was found in util-linux before 2.32.1 in the way su handled the management of... 5.5 Medium -
shadowDebian Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to... 7.8 High -
shadowDebian Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local... 6.4 Medium -
shadowDebian /bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows... 7.2 High -
shadowDebian initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows... 4.9 Medium -
shadowDebian passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag... 7.2 High -
shadowDebian useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide... 3.7 Low -
shadowDebian The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes... 2.1 Low -
shadowDebian The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian... 2.1 Low -
shadowDebian Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions... 4.6 Medium