shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5745-1 advisory.

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202210-26 (Shadow: TOCTOU Race)

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the shadow-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
169370	EulerOS Virtualization 2.10.1 : shadow (EulerOS-SA-2022-2944)	Nessus	Huawei Local Security Checks	medium
169368	EulerOS Virtualization 2.10.0 : shadow (EulerOS-SA-2022-2918)	Nessus	Huawei Local Security Checks	medium
168227	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : shadow vulnerability (USN-5745-1)	Nessus	Ubuntu Local Security Checks	medium
166825	EulerOS 2.0 SP10 : shadow (EulerOS-SA-2022-2698)	Nessus	Huawei Local Security Checks	medium
166814	EulerOS 2.0 SP10 : shadow (EulerOS-SA-2022-2666)	Nessus	Huawei Local Security Checks	medium
166711	GLSA-202210-26 : Shadow: TOCTOU Race	Nessus	Gentoo Local Security Checks	medium
165924	EulerOS Virtualization 3.0.6.0 : shadow-utils (EulerOS-SA-2022-2590)	Nessus	Huawei Local Security Checks	medium
164228	EulerOS 2.0 SP8 : shadow-utils (EulerOS-SA-2022-2234)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2013-4235

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium