It was found that libuser, as used in the chfn userhelper functionality, does not properly filter out newline characters, which allows an authenticated local attacker to corrupt the /etc/passwd file and cause denial-of-service against the system. (CVE-2015-3245)

A flaw was found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root.
(CVE-2015-3246)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1483 advisory.

    - Update CVE-2015-3246 patch based on review comments       Resolves: #1235519

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1482 advisory.

    - Update CVE-2015-3246 patch based on review comments       Resolves: #1235518

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root.
(CVE-2015-3245, CVE-2015-3246)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1483 advisory.

    The libuser library implements a standardized interface for manipulating     and administering user and group accounts. Sample applications that are     modeled after applications from the shadow password suite (shadow-utils)     are included in these packages.

    Two flaws were found in the way the libuser library handled the /etc/passwd     file. A local attacker could use an application compiled against libuser     (for example, userhelper) to manipulate the /etc/passwd file, which could     result in a denial of service or possibly allow the attacker to escalate     their privileges to root. (CVE-2015-3245, CVE-2015-3246)

    Red Hat would like to thank Qualys for reporting these issues.

    All libuser users are advised to upgrade to these updated packages, which     contain a backported patch to correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated libuser packages that fix two security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libuser library implements a standardized interface for manipulating and administering user and group accounts. Sample applications that are modeled after applications from the shadow password suite (shadow-utils) are included in these packages.

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root.
(CVE-2015-3245, CVE-2015-3246)

Red Hat would like to thank Qualys for reporting these issues.

All libuser users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before     0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of     service (/etc/passwd corruption) via a newline character in the GECOS field. (CVE-2015-3245)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-374:01 advisory.

    The libuser library implements a standardized interface for manipulating     and administering user and group accounts.  The library uses pluggable     back-ends to interface to its data sources.
    Sample applications modeled after those included with the shadow password     suite are included.
    Security issues fixed with this release:
    CVE-2015-3245     CVE-2015-3246

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated libuser packages that fix two security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libuser library implements a standardized interface for manipulating and administering user and group accounts. Sample applications that are modeled after applications from the shadow password suite (shadow-utils) are included in these packages.

Two flaws were found in the way the libuser library handled the /etc/passwd file. A local attacker could use an application compiled against libuser (for example, userhelper) to manipulate the /etc/passwd file, which could result in a denial of service or possibly allow the attacker to escalate their privileges to root.
(CVE-2015-3245, CVE-2015-3246)

Red Hat would like to thank Qualys for reporting these issues.

All libuser users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

Security fix for CVE-2015-3245, CVE-2015-3246

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification.
NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
84964	Amazon Linux AMI : usermode / libuser (ALAS-2015-572)	Nessus	Amazon Linux Local Security Checks	2015/7/24	2018/5/15	high
84975	Oracle Linux 7 : libuser (ELSA-2015-1483)	Nessus	Oracle Linux Local Security Checks	2015/7/24	2024/11/1	medium
85115	Oracle Linux 6 : libuser (ELSA-2015-1482)	Nessus	Oracle Linux Local Security Checks	2015/7/30	2024/10/22	medium
85210	Scientific Linux Security Update : libuser on SL6.x i386/x86_64 (20150723)	Nessus	Scientific Linux Local Security Checks	2015/8/4	2021/1/14	high
84977	RHEL 7 : libuser (RHSA-2015:1483)	Nessus	Red Hat Local Security Checks	2015/7/24	2025/3/20	medium
84988	CentOS 7 : libuser (CESA-2015:1483)	Nessus	CentOS Local Security Checks	2015/7/27	2021/1/4	high
85004	Scientific Linux Security Update : libuser on SL7.x x86_64 (20150723)	Nessus	Scientific Linux Local Security Checks	2015/7/27	2021/1/14	high
218764	Linux Distros Unpatched Vulnerability : CVE-2015-3245	Nessus	Misc.	2025/3/4	2026/2/3	medium
289554	MiracleLinux 4 : libuser-0.56.13-8.AXS4 (AXSA:2015-374:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/2/9	medium
84976	RHEL 6 : libuser (RHSA-2015:1482)	Nessus	Red Hat Local Security Checks	2015/7/24	2021/2/5	high
85134	Fedora 22 : libuser-0.62-1.fc22 (2015-12301)	Nessus	Fedora Local Security Checks	2015/7/31	2021/1/11	high
85167	Fedora 21 : libuser-0.62-1.fc21 (2015-12064)	Nessus	Fedora Local Security Checks	2015/8/3	2021/1/11	high
91327	F5 Networks BIG-IP : Linux libuser vulnerability (SOL05770600)	Nessus	F5 Networks Local Security Checks	2016/5/26	2021/3/10	high

检测

插件搜索

high

medium

medium

high

medium

high

high

medium

medium

high

high

high

high