Skip to content
Debian Shadow vulnerabilities
-
debian shadow, linux +1 more
The Debian shadow package before 4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical...
CVE-2017-20002
Fix available
7.8 High
-
debian shadow, linux, fedoraproject fedora +4 more +6 more
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
CVE-2013-4235
Fix available
4.7 Medium
-
debian shadow, red hat sudo, debian linux +1 more +3 more
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -...
CVE-2005-4890
Fix available
7.8 High
-
debian shadow
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local...
CVE-2011-0721
Fix available
6.4 Medium
-
debian shadow
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows...
CVE-2008-5394
Public exploitFix available
7.2 High
-
debian shadow
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide...
CVE-2006-1174
Fix available
3.7 Low
-
debian base-config, shadow +1 more
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes...
CVE-2006-1844
Fix available
2.1 Low
-
debian shadow
Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions...
CVE-2004-1001
Fix available
4.6 Medium