high7.2Public exploit code
CVE-2005-3503
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows loc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux chfn (SuSE 9.3/10) - Local Privilege Escalation2005-11-08 · local · linux · Verified
Impact
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pwdutils | Pwdutils | through 3.0.4 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17469
- http://www.osvdb.org/20525
- http://www.securityfocus.com/archive/1/415725/30/0/threaded
- http://www.securityfocus.com/bid/15314
- http://secunia.com/advisories/17469
- http://www.osvdb.org/20525
- http://www.securityfocus.com/archive/1/415725/30/0/threaded
- http://www.securityfocus.com/bid/15314