CVE

Id
5028  
CVE No.
CVE-2002-0638  
Status
Entry  
Description
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26009 5028 CVE-2002-0638 VULNWATCH:20020729 [VulnWatch] RAZOR advisory: Linux util-linux chfn local root vulnerability  View
26010 5028 CVE-2002-0638 URL:http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html  View
26011 5028 CVE-2002-0638 BUGTRAQ:20020729 RAZOR advisory: Linux util-linux chfn local root vulnerability  View
26012 5028 CVE-2002-0638 URL:http://marc.info/?l=bugtraq&m=102795787713996&w=2  View
26013 5028 CVE-2002-0638 CERT-VN:VU#405955  View
26014 5028 CVE-2002-0638 URL:http://www.kb.cert.org/vuls/id/405955  View
26015 5028 CVE-2002-0638 REDHAT:RHSA-2002:132  View
26016 5028 CVE-2002-0638 URL:http://rhn.redhat.com/errata/RHSA-2002-132.html  View
26017 5028 CVE-2002-0638 REDHAT:RHSA-2002:137  View
26018 5028 CVE-2002-0638 URL:http://www.redhat.com/support/errata/RHSA-2002-137.html  View
26019 5028 CVE-2002-0638 CONECTIVA:CLA-2002:523  View
26020 5028 CVE-2002-0638 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000523  View
26021 5028 CVE-2002-0638 CALDERA:CSSA-2002-043.0  View
26022 5028 CVE-2002-0638 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-043.0.txt  View
26023 5028 CVE-2002-0638 MANDRAKE:MDKSA-2002:047  View
26024 5028 CVE-2002-0638 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-047.php  View
26025 5028 CVE-2002-0638 BUGTRAQ:20020730 TSLSA-2002-0064 - util-linux  View
26026 5028 CVE-2002-0638 URL:http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html  View
26027 5028 CVE-2002-0638 HP:HPSBTL0207-054  View
26028 5028 CVE-2002-0638 URL:http://online.securityfocus.com/advisories/4320  View
26029 5028 CVE-2002-0638 XF:utillinux-chfn-race-condition(9709)  View
26030 5028 CVE-2002-0638 URL:http://www.iss.net/security_center/static/9709.php  View
26031 5028 CVE-2002-0638 BID:5344  View
26032 5028 CVE-2002-0638 URL:http://www.securityfocus.com/bid/5344  View
26033 5028 CVE-2002-0638 OSVDB:5164  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63843 JVNDB-2002-000170 複数ベンダの util-linux パッケージにおける権限昇格の脆弱性 Sun Cobalt RaQ、及び Red Hat Linux の util-linux パッケージには、chfn 、chshコマンドの実行コードである util-linux/setpwnam.c 内のファイルロックシステムの実装に不備があるため、競合状態を発生してしまう脆弱性が存在します。 CVE-2002-0638 5028 6.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000170.html  View