Gentoo GLSA-200606-02: Normal Privilege Escalation in Shadow

Gentoo Linux Security Advisory GLSA 200606-02 https://security.gentoo.org/ Severity: Normal Title: shadow: Privilege escalation Date: June 07, 2006 Bugs: #133615 ID: 200606-02

Synopsis ======= A security issue in shadow allows a local user to perform certain actions with escalated privileges.
Background ========= shadow provides a set of utilities to deal with user accounts.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-apps/shadow < 4.0.15-r2 >= 4.0.15-r2
========== When the mailbox is created in useradd, the "open()" function does not receive the three arguments it expects while O_CREAT is present, which leads to random permissions on the created file,...