shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0292-1 advisory.

    - Fixed not copying of skel files (bsc#1228770)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2805-1 advisory.

    - CVE-2013-4235: Fixed TOCTOU race condition (bsc#916845)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2808-1 advisory.

    - Fixed not copying of skel files (bsc#1228770)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2804-1 advisory.

    - Fixed not copying of skel files (bsc#1228770)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2630-1 advisory.

    - CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2658-1 advisory.

    - CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2648-1 advisory.

    - CVE-2013-4235: Fixed a race condition when copying and removing directory trees (bsc#916845).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2603-1 advisory.

    - CVE-2013-4235: Fixed a race condition when copying and removing       directory trees (bsc#916845).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the shadow package has been released.

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5745-1 advisory.

    Florian Weimer discovered that shadow was not properly copying and removing user directory trees, which     could lead to a race condition. A local attacker could possibly use this issue to setup a symlink attack     and alter or remove directories without authorization.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202210-26 (Shadow: TOCTOU Race)

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the shadow-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees     (CVE-2013-4235)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
504321	Siemens SIMATIC S7-1500 Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2013-4235)	Tenable OT Security	Tenable.ot	medium
217926	Linux Distros Unpatched Vulnerability : CVE-2013-4235	Nessus	Misc.	medium
214904	SUSE SLES15 Security Update : shadow (SUSE-SU-2025:0292-1)	Nessus	SuSE Local Security Checks	medium
205185	SUSE SLES12 Security Update : shadow (SUSE-SU-2024:2805-1)	Nessus	SuSE Local Security Checks	medium
205184	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2808-1)	Nessus	SuSE Local Security Checks	medium
205170	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2804-1)	Nessus	SuSE Local Security Checks	medium
204905	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2630-1)	Nessus	SuSE Local Security Checks	medium
204889	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2658-1)	Nessus	SuSE Local Security Checks	medium
204880	SUSE SLES15 Security Update : shadow (SUSE-SU-2024:2648-1)	Nessus	SuSE Local Security Checks	medium
204737	SUSE SLES12 Security Update : shadow (SUSE-SU-2024:2603-1)	Nessus	SuSE Local Security Checks	medium
203631	Photon OS 4.0: Shadow PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	medium
169370	EulerOS Virtualization 2.10.1 : shadow (EulerOS-SA-2022-2944)	Nessus	Huawei Local Security Checks	medium
169368	EulerOS Virtualization 2.10.0 : shadow (EulerOS-SA-2022-2918)	Nessus	Huawei Local Security Checks	medium
168227	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : shadow vulnerability (USN-5745-1)	Nessus	Ubuntu Local Security Checks	medium
166825	EulerOS 2.0 SP10 : shadow (EulerOS-SA-2022-2698)	Nessus	Huawei Local Security Checks	medium
166814	EulerOS 2.0 SP10 : shadow (EulerOS-SA-2022-2666)	Nessus	Huawei Local Security Checks	medium
166711	GLSA-202210-26 : Shadow: TOCTOU Race	Nessus	Gentoo Local Security Checks	medium
165924	EulerOS Virtualization 3.0.6.0 : shadow-utils (EulerOS-SA-2022-2590)	Nessus	Huawei Local Security Checks	medium
164228	EulerOS 2.0 SP8 : shadow-utils (EulerOS-SA-2022-2234)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2013-4235

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium