CVE-2011-0721
published 2011-02-19CVE-2011-0721: Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS…
PriorityP427medium6.4CVSS 2.0
AVNACLAuNCNIPAP
EPSS
2.31%
81.5th percentile
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | shadow | < shadow 1:4.1.4.2+svn3283-3 (bookworm) | shadow 1:4.1.4.2+svn3283-3 (bookworm) |
| debian | shadow | — | — |
| shadow_project | shadow | >= 0 < 1:4.1.4.2+svn3283-3 | 1:4.1.4.2+svn3283-3 |
| shadow_project | shadow | >= 0 < 1:4.1.4.2+svn3283-3 | 1:4.1.4.2+svn3283-3 |
| shadow_project | shadow | >= 0 < 1:4.1.4.2+svn3283-3 | 1:4.1.4.2+svn3283-3 |
| shadow_project | shadow | >= 0 < 1:4.1.4.2+svn3283-3 | 1:4.1.4.2+svn3283-3 |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
osv6.4MEDIUM
vendor_debian6.4MEDIUM
vendor_redhat6.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
shadow: Multiple CRLF injections in chfn and chsh
vendor_redhat·2011-02-15·CVSS 6.4
CVE-2011-0721 [MEDIUM] shadow: Multiple CRLF injections in chfn and chsh
shadow: Multiple CRLF injections in chfn and chsh
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.
Package: util-linux (Red Hat Enterprise Linux 5) - Not affected
Package: util-linux-ng (Red Hat Enterprise Linux 6) - Not affected
Ubuntu
shadow vulnerability
vendor_ubuntu·2011-02-15
CVE-2011-0721 shadow vulnerability
Title: shadow vulnerability
Summary: Newline injection possible into /etc/passwd
Kees Cook discovered that some shadow utilities did not correctly validate
user input. A local attacker could exploit this flaw to inject newlines into
the /etc/passwd file. If the system was configured to use NIS, this could
lead to existing NIS groups or users gaining or losing access to the system,
resulting in a denial of service or unauthorized access.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2011-0721: shadow - Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1...
vendor_debian·2011·CVSS 6.4
CVE-2011-0721 [MEDIUM] CVE-2011-0721: shadow - Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1...
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.
Scope: local
bookworm: resolved (fixed in 1:4.1.4.2+svn3283-3)
bullseye: resolved (fixed in 1:4.1.4.2+svn3283-3)
forky: resolved (fixed in 1:4.1.4.2+svn3283-3)
sid: resolved (fixed in 1:4.1.4.2+svn3283-3)
trixie: resolved (fixed in 1:4.1.4.2+svn3283-3)
GHSA
GHSA-6wqp-749m-jfw7: Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4
ghsa_unreviewed·2022-05-17
CVE-2011-0721 [MEDIUM] CWE-20 GHSA-6wqp-749m-jfw7: Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.
OSV
CVE-2011-0721: Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4
osv·2011-02-19·CVSS 6.4
CVE-2011-0721 [MEDIUM] CVE-2011-0721: Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.
No detection rules found.
No public exploits indexed.
http://osvdb.org/70895http://secunia.com/advisories/42505http://secunia.com/advisories/43345http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014http://www.debian.org/security/2011/dsa-2164http://www.securityfocus.com/bid/46426http://www.ubuntu.com/usn/USN-1065-1http://www.vupen.com/english/advisories/2011/0396http://www.vupen.com/english/advisories/2011/0398http://www.vupen.com/english/advisories/2011/0773https://exchange.xforce.ibmcloud.com/vulnerabilities/65564http://osvdb.org/70895http://secunia.com/advisories/42505http://secunia.com/advisories/43345http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014http://www.debian.org/security/2011/dsa-2164http://www.securityfocus.com/bid/46426http://www.ubuntu.com/usn/USN-1065-1http://www.vupen.com/english/advisories/2011/0396http://www.vupen.com/english/advisories/2011/0398http://www.vupen.com/english/advisories/2011/0773https://exchange.xforce.ibmcloud.com/vulnerabilities/65564
2011-02-19
Published