tocsin

Debian/coreutils: unknown

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command lin

Action: Upgrade coreutils to 5.93-1 or later.

Affected

introducedfixedlast affected
05.93-1-

Fixed versions

5.93-1

Sources

published · modified · JSON