THREATIST.IORead the docs 5 records
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger).
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured.
An issue was discovered in shadow 4.5.
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors.
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.