CVE-2008-5394

概要

参考情報

• bugs.debian.org/332198
• bugs.debian.org/505071
• bugs.debian.org/505271
• osvdb.org/52200
• security.gentoo.org/glsa/glsa-200903-24.xml
• securityreason.com/securityalert/4695
• mandriva.com/security/advisories
• securityfocus.com/archive/1/498769/100/0/threaded
• securityfocus.com/bid/32552
• ubuntu.com/usn/usn-695-1
• exchange.xforce.ibmcloud.com/vulnerabilities/47037
• exploit-db.com/exploits/7313

shadow のその他の脆弱性

• CVE-2017-20002高 7.8The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows l…
• CVE-2005-4890高 7.8There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be e…
• CVE-2011-0721中 6.4Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/pass…
• CVE-2006-1174低 3.7useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function wh…
• CVE-2006-1844低 2.1The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log fil…