A security issue has been reported in libuser, which can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to libuser setting a default user password when e.g. not specifying a password while adding a new user via the "luseradd" utility, which can be exploited to bypass certain authentication checks with a known password.

The security issue is reported in versions prior to 0.57.

Solution
Update to version 0.57.

Provided and/or discovered by
Reported in a Red Hat bug report.

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-0002
https://fedorahosted.org/libuser/browser/NEWS?rev=1579%3A1114f9b1a156

Deep Links
Links available to Secunia VIM customers