Red Hat Security AdvisoryRHSA-2007:0431
shadow-utils security and bug fix update
Released 2007-06-07 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 shadow-utils-2:4.0.3-29.RHEL3, shadow-utils-2:4.0.3-29.RHEL3.i386
- Red Hat Enterprise Linux AS version 3 shadow-utils-2:4.0.3-29.RHEL3, shadow-utils-2:4.0.3-29.RHEL3.i386, shadow-utils-2:4.0.3-29.RHEL3.ia64 +1
- Red Hat Enterprise Linux ES version 3 shadow-utils-2:4.0.3-29.RHEL3, shadow-utils-2:4.0.3-29.RHEL3.i386, shadow-utils-2:4.0.3-29.RHEL3.ia64
- Red Hat Enterprise Linux WS version 3 shadow-utils-2:4.0.3-29.RHEL3, shadow-utils-2:4.0.3-29.RHEL3.i386, shadow-utils-2:4.0.3-29.RHEL3.ia64
Fixes 1 record
Priority LOW 18
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpr…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00441 · Published 2006-05-28 · Fixed CWE-264
