Debian/Ubuntu Linux 'shadow' Package Local Security Bypass Vulnerability

Bugtraq ID:	46426
Class:	Design Error
CVE:	CVE-2011-0721
Remote:	No
Local:	Yes
Published:	Feb 16 2011 12:00AM
Updated:	Dec 19 2014 12:56AM
Credit:	Kees Cook
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Ubuntu shadow Package 1:4.1.4.1 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux -current Pardus Linux 2011 0 Gentoo Linux Debian shadow Package 1:4.1.4.2 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

Debian/Ubuntu Linux 'shadow' Package Local Security Bypass Vulnerability

The Debian/Ubuntu Linux 'shadow' package is prone to a local security-bypass vulnerability because it fails to properly sanitize user-supplied input.

Attackers can exploit this issue to corrupt '/etc/passwd' file entries causing denial-of-service conditions and possibly create users or groups in NIS environments.

Debian/Ubuntu Linux 'shadow' Package Local Security Bypass Vulnerability

Attackers can use readily available commands to exploit this issue.

Debian/Ubuntu Linux 'shadow' Package Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu login_4.1.4.1-1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.1-1ubuntu2.2_sp arc.deb


• Ubuntu passwd_4.1.4.1-1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.1-1ubuntu2.2_s parc.deb

Slackware Linux x86_64 -current

• Slackware shadow-4.1.4.3-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ a/shadow-4.1.4.3-x86_64-1.txz

Slackware Linux -current

• Slackware shadow-4.1.4.3-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/sh adow-4.1.4.3-i486-1.txz

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu login_4.1.4.1-1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.1-1ubuntu2.2_po werpc.deb


• Ubuntu passwd_4.1.4.1-1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.1-1ubuntu2.2_p owerpc.deb

Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu login_4.1.4.2-1ubuntu3.2_armel.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.2-1ubuntu3.2_ar mel.deb


• Ubuntu passwd_4.1.4.2-1ubuntu3.2_armel.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.2-1ubuntu3.2_a rmel.deb

Slackware Linux 13.1 x86_64

• Slackware shadow-4.1.4.3-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/shadow-4.1.4.3-x86_64-1_slack13.1.txz

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu login_4.1.4.1-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.1-1ubuntu2.2_lp ia.deb


• Ubuntu passwd_4.1.4.1-1ubuntu2.2_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.1-1ubuntu2.2_l pia.deb

Slackware Linux 13.1

• Slackware shadow-4.1.4.3-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ shadow-4.1.4.3-i486-1_slack13.1.txz

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu login_4.1.4.2-1ubuntu3.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.4.2-1ub untu3.2_amd64.deb


• Ubuntu passwd_4.1.4.2-1ubuntu3.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.4.2-1u buntu3.2_amd64.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu login_4.1.4.2-1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.2-1ubuntu2.2_po werpc.deb


• Ubuntu passwd_4.1.4.2-1ubuntu2.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.2-1ubuntu2.2_p owerpc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu login_4.1.4.1-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.4.1-1ub untu2.2_i386.deb


• Ubuntu passwd_4.1.4.1-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.4.1-1u buntu2.2_i386.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu login_4.1.4.2-1ubuntu3.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.2-1ubuntu3.2_po werpc.deb


• Ubuntu passwd_4.1.4.2-1ubuntu3.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.2-1ubuntu3.2_p owerpc.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu login_4.1.4.2-1ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.4.2-1ub untu2.2_amd64.deb


• Ubuntu passwd_4.1.4.2-1ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.4.2-1u buntu2.2_amd64.deb

Ubuntu Ubuntu Linux 9.10 ARM

• Ubuntu login_4.1.4.1-1ubuntu2.2_armel.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.1-1ubuntu2.2_ar mel.deb


• Ubuntu passwd_4.1.4.1-1ubuntu2.2_armel.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.1-1ubuntu2.2_a rmel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu login_4.1.4.1-1ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.4.1-1ub untu2.2_amd64.deb


• Ubuntu passwd_4.1.4.1-1ubuntu2.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.4.1-1u buntu2.2_amd64.deb

Ubuntu Ubuntu Linux 10.04 ARM

• Ubuntu login_4.1.4.2-1ubuntu2.2_armel.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.2-1ubuntu2.2_ar mel.deb


• Ubuntu passwd_4.1.4.2-1ubuntu2.2_armel.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.2-1ubuntu2.2_a rmel.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu login_4.1.4.2-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.4.2-1ub untu3.2_i386.deb


• Ubuntu passwd_4.1.4.2-1ubuntu3.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.4.2-1u buntu3.2_i386.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu login_4.1.4.2-1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.4.2-1ubuntu2.2_sp arc.deb


• Ubuntu passwd_4.1.4.2-1ubuntu2.2_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.4.2-1ubuntu2.2_s parc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu login_4.1.4.2-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.4.2-1ub untu2.2_i386.deb


• Ubuntu passwd_4.1.4.2-1ubuntu2.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.4.2-1u buntu2.2_i386.deb

Debian/Ubuntu Linux 'shadow' Package Local Security Bypass Vulnerability

References: