NetSight
IP …
low2.1Public exploit code

CVE-2015-3245

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode p…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.

Affected products

VendorProductAffected versions
RedhatLibuser
through 0.56.13-5
Versions 0.60-1, 0.60-2, 0.60-3, 0.60-4, 0.60-5

Weakness classification

CWE-20

References