CVE-2005-3503

Published: Nov 5, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges.

Affected (1)

Products: Pwdutils: Pwdutils

Pwdutils

1 product

Pwdutils

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pwdutils Pwdutils	version ≤ 3.0.4

References (8)

http://secunia.com/advisories/17469

Source: cve@mitre.org

http://www.osvdb.org/20525

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/415725/30/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15314

Source: cve@mitre.org

http://secunia.com/advisories/17469

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/20525

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/415725/30/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15314

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.