CVE-2004-1001

Shadow <4.0.5 - Privilege Escalation

Title source: llm

Description

Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.

Scores

EPSS 0.0008
EPSS Percentile 23.7%

Classification

Status draft

Affected Products (1)

debian/shadow

Timeline

Published Mar 01, 2005
Tracked Since Feb 18, 2026