4 results · Feed
-
Unscored —
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finge…
-
Medium 5.5
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local…
-
Unscored —
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the …
-
Unscored —
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.