Nessus Plugin #17233

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200502-30] cmd5checkpw: Local password leak vulnerability

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2005 Michel Arboi

Summary:

cmd5checkpw: Local password leak vulnerability

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

GLSA:200502-30

Description:

The remote host is affected by the vulnerability described in GLSA-200502-30
(cmd5checkpw: Local password leak vulnerability)


Florian Westphal discovered that cmd5checkpw is installed setuid
cmd5checkpw but does not drop privileges before calling execvp(), so
the invoked program retains the cmd5checkpw euid.

Impact

Local users that know at least one valid /etc/poppasswd
user/password combination can read the /etc/poppasswd file.

Workaround

There is no known workaround at this time.


Solution:
All cmd5checkpw users should upgrade to the latest available
version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-mail/cmd5checkpw-0.22-r2"


Risk factor : Low