Bug 130209 (CVE-2005-3503)

Summary:	VUL-0: CVE-2005-3503: pwdutils: trivial root exploit using chfn
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Marcus Meissner <meissner>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	security-team
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:	CVE-2005-3503: CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Comment 4 Ludwig Nussel 2005-10-24 12:48:55 UTC

   4 local root user
  +1 default package
  +1 default active
  +1 command execution

Total Score: 7 (Critical)

Comment 5 Marcus Meissner 2005-10-24 15:07:43 UTC

patchinfos submitted.

Comment 6 Thorsten Kukuk 2005-10-25 07:05:24 UTC

Everything is submitted.

Comment 7 Ludwig Nussel 2005-10-25 07:34:41 UTC

Please read and obey the following best practice guideline next time, thanks.
http://w3d.suse.de/Dev/Components/Packages/PackMan/pm_pr_fixing_bug.html#pm_pr_fb_bt_security_bugs

Patchinfos are not yet checked in, no updates released yet => Bug still open for security team.

Comment 8 Thorsten Kukuk 2005-10-25 07:43:38 UTC

Please read bugzilla guidline of TPMs: A bug has to be closed, if developer
has fixed and submitted everything to autobuild.

If security team needs something for tracking they should use SWAMP, that is a progress tracking tool. Bugzilla is not such a tool, especially since developers have no influence on next steps.

Comment 9 Ludwig Nussel 2005-10-25 07:56:53 UTC

here we go again

Comment 10 Marcus Meissner 2005-11-07 09:59:44 UTC

approved and advisory released.

Comment 11 Marcus Meissner 2005-11-18 10:38:31 UTC

CVE-2005-3503

"chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges."

Comment 12 Thomas Biege 2009-10-13 21:44:17 UTC

CVE-2005-3503: CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)