Red Hat Security AdvisoryRHSA-2007:0276
shadow-utils security and bug fix update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 shadow-utils-2:4.0.3-61.RHEL4, shadow-utils-2:4.0.3-61.RHEL4.i386, shadow-utils-2:4.0.3-61.RHEL4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 shadow-utils-2:4.0.3-61.RHEL4, shadow-utils-2:4.0.3-61.RHEL4.i386
- Red Hat Enterprise Linux ES version 4 shadow-utils-2:4.0.3-61.RHEL4, shadow-utils-2:4.0.3-61.RHEL4.i386, shadow-utils-2:4.0.3-61.RHEL4.ia64
- Red Hat Enterprise Linux WS version 4 shadow-utils-2:4.0.3-61.RHEL4, shadow-utils-2:4.0.3-61.RHEL4.i386, shadow-utils-2:4.0.3-61.RHEL4.ia64
Fixes 1 record
Priority LOW 18
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpr…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00441 · Published 2006-05-28 · Fixed CWE-264
