Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SuSE Shadow文件截断漏洞
Vulnerability Description
SuSE Linux是一款由SuSE维护的免费开放源代码操作系统。 SuSE Linux中shadow工具包中的部分工具存在漏洞，可导致本地攻击者破坏/etc/passwd和/etc/shadow文件。 攻击者可以在调用shadow工具包中的任意程序修改系统文件前设置恶意的不正确的文件大小限制，可导致破坏/etc/passwd和/etc/shadow文件的内容，产生本地拒绝服务攻击，并根据程序的权限不同，存在获得root权限的可能。 不过此工具包在系统中不是默认安装。
CVSS Information
N/A
Vulnerability Type
N/A