Not rated
CVE-2023-29383 In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change…
Description
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| RUGGEDCOM ROX MX5000 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX MX5000RE 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1400 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1500 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1501 2.17 | earliest → < 2.17.0 | 2.17.0 |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM ROX RX1510 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1511 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1512 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1524 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1536 2.17 | earliest → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX5000 2.17 | earliest → < 2.17.0 | 2.17.0 |
References
- github.com github.com
- github.com github.com
- www.trustwave.com www.trustwave.com
- www.trustwave.com www.trustwave.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated