CVE

Id
48633  
CVE No.
CVE-2011-0721  
Status
Candidate  
Description
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528766 48633 CVE-2011-0721 DEBIAN:DSA-2164  View
528767 48633 CVE-2011-0721 URL:http://www.debian.org/security/2011/dsa-2164  View
528768 48633 CVE-2011-0721 SLACKWARE:SSA:2011-086-03  View
528769 48633 CVE-2011-0721 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014  View
528770 48633 CVE-2011-0721 UBUNTU:USN-1065-1  View
528771 48633 CVE-2011-0721 URL:http://www.ubuntu.com/usn/USN-1065-1  View
528772 48633 CVE-2011-0721 BID:46426  View
528773 48633 CVE-2011-0721 URL:http://www.securityfocus.com/bid/46426  View
528774 48633 CVE-2011-0721 OSVDB:70895  View
528775 48633 CVE-2011-0721 URL:http://osvdb.org/70895  View
528776 48633 CVE-2011-0721 SECUNIA:42505  View
528777 48633 CVE-2011-0721 URL:http://secunia.com/advisories/42505  View
528778 48633 CVE-2011-0721 SECUNIA:43345  View
528779 48633 CVE-2011-0721 URL:http://secunia.com/advisories/43345  View
528780 48633 CVE-2011-0721 VUPEN:ADV-2011-0396  View
528781 48633 CVE-2011-0721 URL:http://www.vupen.com/english/advisories/2011/0396  View
528782 48633 CVE-2011-0721 VUPEN:ADV-2011-0398  View
528783 48633 CVE-2011-0721 URL:http://www.vupen.com/english/advisories/2011/0398  View
528784 48633 CVE-2011-0721 VUPEN:ADV-2011-0773  View
528785 48633 CVE-2011-0721 URL:http://www.vupen.com/english/advisories/2011/0773  View
528786 48633 CVE-2011-0721 XF:shadow-chfnchsh-crlf-injection(65564)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31692 JVNDB-2011-001932 Linux kernel の do_task_stat 関数における ASLR プロテクション機構を無効化される脆弱性 Linux kernel の fs/proc/array.c 内にある do_task_stat 関数は、期待される UID チェックを実行しないため、ASLR プロテクション機構を無効化される脆弱性が存在します。 CVE-2011-0726 48633 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001932.html  View