Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libuser 权限许可和访问控制漏洞
Vulnerability Description
Red Hat libuser是美国红帽（Red Hat）公司的一个用于操作和管理用户和组账户的标准接口库。 usermode程序包中的userhelper程序中使用的libuser 0.56.13-5及之前版本和0.60-7之前0.60版本中存在安全漏洞，该漏洞源于程序直接修改/etc/passwd文件。本地攻击者可通过在执行修改操作时触发错误利用该漏洞造成拒绝服务（不一致的文件状态）。
CVSS Information
N/A
Vulnerability Type
N/A