NetSight
IP …
medium6.2

CVE-2002-0638

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when m…

Impact

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.

Affected products

VendorProductAffected versions
MandrakesoftMandrake Single Network Firewall
Version 7.2
HpSecure Os
Version 1.0
MandrakesoftMandrake Linux
Versions 7.0, 7.1, 7.2, 8.0, 8.1, 8.2
MandrakesoftMandrake Linux Corporate Server
Version 1.0.1
RedhatLinux
Versions 6.0, 6.1, 6.2, 7.0, 7.1, 7.2

References