Solaris useradd expiration date Vulnerability
BID:426
Info
Solaris useradd expiration date Vulnerability
| Bugtraq ID: | 426 |
| Class: | Design Error |
| CVE: |
CVE-1999-1023 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 10 1999 12:00AM |
| Updated: | Jul 11 2009 12:56AM |
| Credit: | First posted to BugTraq by Chad Price <[email protected]> on June 10, 1999. |
| Vulnerable: |
Sun Solaris 7.0 |
| Not Vulnerable: | |
Discussion
Solaris useradd expiration date Vulnerability
The Solaris useradd binary shipped with Solaris 7.0 has a bug which can possibly allow users who are supposed to be expired by a certain time to login. The problem with useradd is the interpretation of the value passed after the paramater -e (expire). If one were to use useradd to set an expiry date the following way, :
"-e 6/30/2000",
the interpretation would be 'June 30, 2020'. The consequence of this vulnerability is having expired users having access to the vulnerable host.
The Solaris useradd binary shipped with Solaris 7.0 has a bug which can possibly allow users who are supposed to be expired by a certain time to login. The problem with useradd is the interpretation of the value passed after the paramater -e (expire). If one were to use useradd to set an expiry date the following way, :
"-e 6/30/2000",
the interpretation would be 'June 30, 2020'. The consequence of this vulnerability is having expired users having access to the vulnerable host.
Exploit / POC
Solaris useradd expiration date Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Solaris useradd expiration date Vulnerability