Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2015-3246

libuser: Security flaw in handling /etc/passwd file

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

CVSS 3.1 · 7.4 High EPSS 8.5% KEV · Listed
Vendors
Libuser Project Opensuse Redhat
Products
Libuser Opensuse Enterprise Linux
CVE-2015-3245

libuser: does not filter newline characters in the GECOS field

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.

CVSS 2.0 · 2.1 Low EPSS 5.4% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Libuser
CVE-2011-0002

libuser creates LDAP users with a default password

libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.

CVSS 2.0 · 6.4 Medium EPSS 3.8% KEV · Not listed
Vendors
Miloslav Trmac Redhat
Products
Libuser Enterprise Linux