2002-06-25 04:00:00
mitre
PUBLISHED
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.