shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20145 advisory.

    The shadow-utils packages include programs for converting UNIX password files to the shadow password     format, as well as utilities for managing user and group accounts.

    Security Fix(es):

    * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise     (CVE-2024-56433)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20559 advisory.

    The shadow-utils packages include programs for converting UNIX password files to the shadow password     format, as well as utilities for managing user and group accounts.

    Security Fix(es):

    * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise     (CVE-2024-56433)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000     through 165535 for the first user account) that can realistically conflict with the uids of users defined     on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap     for access to an NFS home directory (or same-host resources in the case of remote logins by these local     network users). NOTE: it may also be argued that system administrators should not have assigned uids,     within local networks, that are within the range that can occur in /etc/subuid. (CVE-2024-56433)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
504090	Siemens SIMATIC S7-1500 Initialization of a Resource with an Insecure Default (CVE-2024-56433)	Tenable OT Security	Tenable.ot	low
274777	RHEL 10 : shadow-utils (RHSA-2025:20145)	Nessus	Red Hat Local Security Checks	low
274721	RHEL 9 : shadow-utils (RHSA-2025:20559)	Nessus	Red Hat Local Security Checks	low
230845	Linux Distros Unpatched Vulnerability : CVE-2024-56433	Nessus	Misc.	low

Detections

Analytics

CVE-2024-56433

low

Tenable Plugins

low

low

low

low