Test ID:	1.3.6.1.4.1.25623.1.0.57072
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-308-1 (shadow)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to shadow announced via advisory USN-308-1. A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Ilja van Sprundel discovered that passwd, when called with the -f, -g, or -s option, did not check the result of the setuid() call. On systems that configure PAM limits for the maximum number of user processes, a local attacker could exploit this to execute chfn, gpasswd, or chsh with root privileges. This does not affect the default configuration of Ubuntu. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 5.04: passwd 1:4.0.3-30.7ubuntu16.1 Ubuntu 5.10: passwd 1:4.0.3-37ubuntu10 Ubuntu 6.06 LTS: passwd 1:4.0.13-7ubuntu3.1 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-308-1 Risk factor : High
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.