Description
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.
References
- suse-shadow-filesize-limits(9102) vdb-entry
- 4757 vdb-entry
- SuSE-SA:2002:017 vendor-advisory