VULNERABILITY INTELLIGENCE
CVE-2005-3503
CVSS score7.2 HIGH
EPSS probability2.84%
CISA KEVNot currently listed
Published2005-11-05
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges.