CVE-2011-0721

Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.

Date published : 2011-02-18

http://www.securityfocus.com/bid/46426

http://www.debian.org/security/2011/dsa-2164