CVE-2018-1113
published 2018-07-03CVE-2018-1113: setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security…
PriorityP425medium5.3CVSS 3.0
AVLACLPRLUINSUCLILAL
EPSS
0.32%
23.4th percentile
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | setup | < 2.11.4 | 2.11.4 |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat4.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
setup: nologin listed in /etc/shells violates security expectations
vendor_redhat·2018-04-24·CVSS 4.8
CVE-2018-1113 [MEDIUM] CWE-285 setup: nologin listed in /etc/shells violates security expectations
setup: nologin listed in /etc/shells violates security expectations
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
Setup in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access t
GHSA
GHSA-pj9f-pvw9-ffjc: setup before version 2
ghsa_unreviewed·2022-05-13
CVE-2018-1113 [MEDIUM] CWE-732 GHSA-pj9f-pvw9-ffjc: setup before version 2
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations
bugzilla·2018-04-24·CVSS 4.8
CVE-2018-1113 [MEDIUM] CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations
CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations
setup in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
Note that SELinux and gdm (and probably others) have special-case workarounds for this issue.
Fedora bug: https://bugzilla.redhat.com/show_bug.cgi?id=1378893
Prior discussions:
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/UCUWTT63JS72R7ROFE46ZVUZLFN3K2MZ/#UCUWTT63JS72R7ROFE46ZVUZLFN3K2MZ
- https://www.redhat.com/arc
Bugzilla
CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations [fedora-all]
bugzilla·2018-04-24·CVSS 4.8
CVE-2018-1113 [MEDIUM] CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations [fedora-all]
CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple s
Bugzilla
CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations [fedora-all]
bugzilla·2016-09-23·CVSS 4.8
CVE-2018-1113 [MEDIUM] CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations [fedora-all]
CVE-2018-1113 setup: nologin listed in /etc/shells violates security expectations [fedora-all]
Description of problem:
nologin listed in /etc/shells violates security expectations of su, nologin, as well as of /etc/shells. /etc/shells should list only non-restricted shells.
Version-Release number of selected component (if applicable):
2.10.4-1.fc25
How reproducible:
always
Steps to Reproduce:
1. set up a user with /sbin/nologin as default shell
2. su -s /usr/bin/bash - user
3. login
Actual results:
* logged in as the user with the specified non-restricted shell.
* /etc/shells contains nologin.
Expected results:
* su prohibits the command line-specified shell from being used because the default shell is restricted.
* /etc/shells doesn't contain nologin.
Additional info:
# show
https://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/errata/RHSA-2018:3249https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1113https://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/errata/RHSA-2018:3249https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1113
2018-07-03
Published