Description
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
Affected products
- andries_brouwer / util-linux2.10s – 2.10s
- andries_brouwer / util-linux2.11d – 2.11d