CVE-2011-0721

N/A Unknown

Published: February 19, 2011 Modified: April 29, 2026

Description

Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/70895

Source: security@ubuntu.com

http://secunia.com/advisories/42505

Source: security@ubuntu.com

Vendor Advisory

http://secunia.com/advisories/43345

Source: security@ubuntu.com

Vendor Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014

Source: security@ubuntu.com

http://www.debian.org/security/2011/dsa-2164

Source: security@ubuntu.com

http://www.securityfocus.com/bid/46426

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-1065-1

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2011/0396

Source: security@ubuntu.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0398

Source: security@ubuntu.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0773

Source: security@ubuntu.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/65564

Source: security@ubuntu.com

http://osvdb.org/70895