Vulnerabilities > CVE-2002-0638

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
mandrakesoft
redhat
hp
nessus
NVD
Published: 2002-08-12
Updated: 2024-11-20

Summary

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.

Vulnerable Configurations

Part Description Count
Application
Mandrakesoft
1
OS
Mandrakesoft
9
OS
Redhat
18
OS
Hp
1

Nessus

  • NASL familyMandriva Local Security Checks
    NASL idMANDRAKE_MDKSA-2002-047.NASL
    descriptionMichal Zalewski found a vulnerability in the util-linux package with the chfn utility. This utility allows users to modify some information in the /etc/passwd file, and is installed setuid root. Using a carefully crafted attack sequence, an attacker can exploit a complex file locking and modification race that would allow them to make changes to the /etc/passwd file. To successfully exploit this vulnerability and obtain privilege escalation, there is a need for some administrator interaction, and the password file must over over 4kb in size; the attacker
    last seen2020-06-01
    modified2020-06-02
    plugin id13950
    published2004-07-31
    reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/13950
    titleMandrake Linux Security Advisory : util-linux (MDKSA-2002:047)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2002-137.NASL
    descriptionThe util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The
    last seen2020-06-01
    modified2020-06-02
    plugin id12311
    published2004-07-06
    reporterThis script is Copyright (C) 2004-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/12311
    titleRHEL 2.1 : util-linux (RHSA-2002:137)

Redhat

advisories
  • rhsa
    idRHSA-2002:132
  • rhsa
    idRHSA-2002:137

References