The SCO Group (SCO Linux) Information for VU#405955
util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility
- Vendor Information Help Date Notified: 26 Jun 2002
- Statement Date:
- Date Updated: 30 Oct 2002
Caldera OpenLinux is vulnerable to this race condition, and we are preparing a fix.
The vendor has not provided us with any further information regarding this vulnerability.
Please also see ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2002-043.0.txt.
If you have feedback, comments, or additional information about this vulnerability, please send us email.