Red Hat Security Advisory

RHSA-2011:0170

libuser security update

Released 2011-01-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) libuser-0.54.7-2.1.el5_5.2, libuser-0.54.7-2.1.el5_5.2.i386, libuser-0.54.7-2.1.el5_5.2.ia64 +5
Red Hat Enterprise Linux AS version 4 libuser-0.52.5-1.1.el4_8.1, libuser-0.52.5-1.1.el4_8.1.i386, libuser-0.52.5-1.1.el4_8.1.ia64 +5
Red Hat Enterprise Linux Desktop (v. 5 client) libuser-0.54.7-2.1.el5_5.2, libuser-0.54.7-2.1.el5_5.2.i386
Red Hat Enterprise Linux Desktop (v. 6) libuser-0.56.13-4.el6_0.1, libuser-python-0.56.13-4.el6_0.1
Red Hat Enterprise Linux Desktop Optional (v. 6) libuser-0.56.13-4.el6_0.1, libuser-devel-0.56.13-4.el6_0.1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libuser-0.54.7-2.1.el5_5.2, libuser-devel-0.54.7-2.1.el5_5.2, libuser-devel-0.54.7-2.1.el5_5.2.i386
Red Hat Enterprise Linux Desktop version 4 libuser-0.52.5-1.1.el4_8.1, libuser-0.52.5-1.1.el4_8.1.i386, libuser-devel-0.52.5-1.1.el4_8.1 +1
Red Hat Enterprise Linux ES version 4 libuser-0.52.5-1.1.el4_8.1, libuser-0.52.5-1.1.el4_8.1.i386, libuser-0.52.5-1.1.el4_8.1.ia64 +3
Red Hat Enterprise Linux HPC Node (v. 6) libuser-0.56.13-4.el6_0.1
Red Hat Enterprise Linux HPC Node Optional (v. 6) libuser-0.56.13-4.el6_0.1, libuser-devel-0.56.13-4.el6_0.1, libuser-python-0.56.13-4.el6_0.1
Red Hat Enterprise Linux Server (v. 6) libuser-0.56.13-4.el6_0.1, libuser-0.56.13-4.el6_0.1.ppc, libuser-python-0.56.13-4.el6_0.1
Red Hat Enterprise Linux Server Optional (v. 6) libuser-0.56.13-4.el6_0.1, libuser-devel-0.56.13-4.el6_0.1, libuser-devel-0.56.13-4.el6_0.1.ppc
Red Hat Enterprise Linux WS version 4 libuser-0.52.5-1.1.el4_8.1, libuser-0.52.5-1.1.el4_8.1.i386, libuser-0.52.5-1.1.el4_8.1.ia64 +3
Red Hat Enterprise Linux Workstation (v. 6) libuser-0.56.13-4.el6_0.1, libuser-python-0.56.13-4.el6_0.1
Red Hat Enterprise Linux Workstation Optional (v. 6) libuser-0.56.13-4.el6_0.1, libuser-devel-0.56.13-4.el6_0.1

Fixes 1 record

TI-2011-00002 CVE-2011-0002 · GHSA-6ppq-r3vw-8xm4

libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user…

LOW 35

libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0379 Published 2011-01-22 Fixed CWE-310