Unscored severity · published Jul 28, 2008
CVE-2008-1946
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Coreutils · Gnu
5.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1946
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1946
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2008-0780.html
Vendor Advisory
http://secunia.com/advisories/31225
securitytracker.com
http://securitytracker.com/id?1020552
www.securityfocus.com
http://www.securityfocus.com/bid/30363
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43993
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10029
More from Coreutils
9.8
CVE-2015-4042
Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly…
7.8
CVE-2015-4041
The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by…
7.1
CVE-2017-18018
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows…
6.1
CVE-2026-56392
Heap-based Buffer Overflow in GNU coreutils
6.1
CVE-2026-56391
Out‑of‑bounds Read in GNU coreutils