CVE-2002-0638

Mandrake Single Network Firewall - Privilege Escalation via Race Condition in setpwnam

Title source: llm

Description

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.

References (13)

Core 13

Core References

Various Sources vendor-advisory x_refsource_caldera

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-043.0.txt

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5344

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9709.php

Various Sources vendor-advisory x_refsource_mandrake

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-047.php

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2002-132.html

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/405955

Third Party Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html

Vendor Advisory vendor-advisory x_refsource_conectiva

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000523

Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp

http://online.securityfocus.com/advisories/4320

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=102795787713996&w=2

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2002-137.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/5164

Scores

EPSS 0.0008

EPSS Percentile 24.4%

Details

Status published

Products (16)

hp/secure_os 1.0

mandrakesoft/mandrake_linux 7.0

mandrakesoft/mandrake_linux 7.1

mandrakesoft/mandrake_linux 7.2

mandrakesoft/mandrake_linux 8.0 (2 CPE variants)

mandrakesoft/mandrake_linux 8.1 (2 CPE variants)

mandrakesoft/mandrake_linux 8.2

mandrakesoft/mandrake_linux_corporate_server 1.0.1

mandrakesoft/mandrake_single_network_firewall 7.2

redhat/linux 6.0 (3 CPE variants)

... and 6 more

Published Aug 12, 2002

Tracked Since Feb 18, 2026