Red Hat Security AdvisoryRHSA-2008:0780
coreutils security update
Released 2008-07-24 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 coreutils-5.2.1-31.8.el4, coreutils-5.2.1-31.8.el4.i386, coreutils-5.2.1-31.8.el4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 coreutils-5.2.1-31.8.el4, coreutils-5.2.1-31.8.el4.i386
- Red Hat Enterprise Linux ES version 4 coreutils-5.2.1-31.8.el4, coreutils-5.2.1-31.8.el4.i386, coreutils-5.2.1-31.8.el4.ia64
- Red Hat Enterprise Linux WS version 4 coreutils-5.2.1-31.8.el4, coreutils-5.2.1-31.8.el4.i386, coreutils-5.2.1-31.8.el4.ia64
Fixes 1 record
Priority LOW 20
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improp…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00313 · Published 2008-07-28 · Fixed CWE-264
