SUSE update for pwdutils/shadow - Secunia Advisories - Vulnerability Intelligence

SUSE update for pwdutils/shadow
Secunia Advisory:	SA17469	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2005-11-07
Last Update:	2005-11-09
Popularity:	7,306 views

Critical:	Less critical
Impact:	Privilege escalation
Where:	Local system
Solution Status:	Vendor Patch

OS:	SuSE Linux 9.0 SuSE Linux 9.1 SUSE Linux 9.2 SUSE Linux 9.3 SuSE Linux Desktop 1.x SuSE Linux Enterprise Server 8 SUSE Linux Enterprise Server 9 UnitedLinux 1.0

Subscribe:	Instant alerts on relevant vulnerabilities

Description: SUSE has issued updates for pwdutils and shadow. These fix a vulnerability, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to an error in the setuid "chfn" program in validating its arguments when changing the GECOS field. This can be exploited by malicious users to gain root privileges. Solution: Apply updated packages. -- x86 Platform -- SUSE LINUX 9.3: ftp://ftp.suse.com/pub/suse/i386/upda...rpm/i586/pwdutils-2.6.96-4.2.i586.rpm 4705772232599de3a2d9dc83c922ee47 SUSE LINUX 9.2: ftp://ftp.suse.com/pub/suse/i386/upda...rpm/i586/pwdutils-2.6.90-6.2.i586.rpm aae77d1eab9d617be89ab993f9f8a47d SUSE LINUX 9.1: ftp://ftp.suse.com/pub/suse/i386/upda...m/i586/pwdutils-2.6.4-2.18.3.i586.rpm 5e957e0370ac82874979e0c02187517e SuSE Linux 9.0: ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/shadow-4.0.3-267.i586.rpm 8cf127c4d2e74f17cf0ff058f4feaf00 -- x86-64 Platform -- SUSE LINUX 9.3: ftp://ftp.suse.com/pub/suse/i386/upda...x86_64/pwdutils-2.6.96-4.2.x86_64.rpm 785543d9276bd5de611ce0e82bc3c066 SUSE LINUX 9.2: ftp://ftp.suse.com/pub/suse/i386/upda...x86_64/pwdutils-2.6.90-6.2.x86_64.rpm 82b384b4d65189c2af84677d7fc02dba SUSE LINUX 9.1: ftp://ftp.suse.com/pub/suse/x86_64/up...6_64/pwdutils-2.6.4-2.18.3.x86_64.rpm f5d860c203d8dc5c6b85318229fe68d8 SuSE Linux 9.0: ftp://ftp.suse.com/pub/suse/x86_64/up...pm/x86_64/shadow-4.0.3-267.x86_64.rpm 384136f520ebf09d3be779291da92c8d -- Sources -- SUSE LINUX 9.3: ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/pwdutils-2.6.96-4.2.src.rpm cb0d28c88ecf013418234ed39ff87e85 SUSE LINUX 9.2: ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/pwdutils-2.6.90-6.2.src.rpm e8854e2433279f4a2650d354a07f3605 SUSE LINUX 9.1: ftp://ftp.suse.com/pub/suse/i386/upda...rpm/src/pwdutils-2.6.4-2.18.3.src.rpm 81453f140a633eeb0b0a841b857e49a5 ftp://ftp.suse.com/pub/suse/x86_64/up...rpm/src/pwdutils-2.6.4-2.18.3.src.rpm 7f5d161dae57bf1fb64cd39269b5255c SuSE Linux 9.0: ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/shadow-4.0.3-267.src.rpm 6cc9c84bdea5f04c290c55c942327bb0 ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/shadow-4.0.3-267.src.rpm d463b528a727655b392230302d998976 Provided and/or discovered by: The vendor credits Thomas Gerisch. Changelog: 2005-11-09: Updated link in original advisory. Original Advisory: http://www.novell.com/linux/security/advisories/2005_64_pwdutils.html

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

7th Oct, 2008

New advisories:	19
New vulnerabilities:	68
Updated advisories:	62

Moderately // 366 views

Debian update for php5

Moderately // 296 views

Atarone CMS Multiple Vulnerabilities

Less // 282 views

MetaGauge Directory Traversal Vulnerability

Less // 319 views

H-Sphere webshell4 Cross-Site Scripting and Request Forgery

Moderately // 305 views

CMME Information Disclosure Security Issues

Moderately // 321 views

Debian update for squid

Less // 321 views

SUSE update for mercurial

Moderately // 370 views

SUSE update for openssh

Moderately // 284 views

SUSE update for dovecot and graphicsmagic

Less // 299 views

Fedora update for mediawiki

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.