[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f884ednYY41-Js_IGO1W3T7y9TIYd4ng7xYEmsKINYu4":3,"g5a-ex:debian\u002Fshadow@*":223,"g5a-family:debian\u002Fshadow":225},{"success":4,"data":5},true,{"product":6,"versions":108,"topVulnerabilitiesByEpss":154,"kevVulnerabilities":200,"seoMetadata":201,"meta":220},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":107},"debian","shadow",45,7,0,"2021-03-17",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.1",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.10",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.11",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.11.1",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.12",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.13",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.14",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.15",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.16",{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.17",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.18",{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.18.1",{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.18.2",{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.2",{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.3",{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.4",{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},"4.0.4.1",2,{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.5",{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.6",{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.7",{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.8",{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},"4.0.9",{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.0",{"version":66,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.1",{"version":68,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.2",{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.2.1",{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.2.2",{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.3",{"version":76,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.3.1",{"version":78,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.4",{"version":80,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.4.1",{"version":82,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.4.2",{"version":84,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.5",{"version":86,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.5.1",{"version":88,"cve_count":11,"kev_count":11,"has_kev":17},"4.2.1",{"version":90,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.0",{"version":92,"cve_count":11,"kev_count":11,"has_kev":17},"4.3.1",{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},"4.4",{"version":96,"cve_count":11,"kev_count":11,"has_kev":17},"4.5",{"version":98,"cve_count":11,"kev_count":11,"has_kev":17},"4.5-1",{"version":100,"cve_count":11,"kev_count":11,"has_kev":17},"4.6",{"version":102,"cve_count":11,"kev_count":11,"has_kev":17},"4.7",{"version":104,"cve_count":11,"kev_count":11,"has_kev":17},"4.8",{"version":106,"cve_count":11,"kev_count":11,"has_kev":17},"4.8.1","Shadow by Debian is a technology product with 45 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},{"version":66,"cve_count":11,"kev_count":11,"has_kev":17},{"version":68,"cve_count":11,"kev_count":11,"has_kev":17},{"version":70,"cve_count":11,"kev_count":11,"has_kev":17},{"version":72,"cve_count":11,"kev_count":11,"has_kev":17},{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},{"version":76,"cve_count":11,"kev_count":11,"has_kev":17},{"version":78,"cve_count":11,"kev_count":11,"has_kev":17},{"version":80,"cve_count":11,"kev_count":11,"has_kev":17},{"version":82,"cve_count":11,"kev_count":11,"has_kev":17},{"version":84,"cve_count":11,"kev_count":11,"has_kev":17},{"version":86,"cve_count":11,"kev_count":11,"has_kev":17},{"version":88,"cve_count":11,"kev_count":11,"has_kev":17},{"version":90,"cve_count":11,"kev_count":11,"has_kev":17},{"version":92,"cve_count":11,"kev_count":11,"has_kev":17},{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},{"version":96,"cve_count":11,"kev_count":11,"has_kev":17},{"version":98,"cve_count":11,"kev_count":11,"has_kev":17},{"version":100,"cve_count":11,"kev_count":11,"has_kev":17},{"version":102,"cve_count":11,"kev_count":11,"has_kev":17},{"version":104,"cve_count":11,"kev_count":11,"has_kev":17},{"version":106,"cve_count":11,"kev_count":11,"has_kev":17},[155,163,170,177,181,188,194],{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":160,"severity":161,"isKev":17,"epssScore":162},"CVE-2008-5394","\u002Fbin\u002Flogin in shadow 4.0.18.1 in Debian GNU\u002FLinux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.","2008-12-09",7.2,"v2","High",0.00949,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":167,"cvssVersion":168,"severity":161,"isKev":17,"epssScore":169},"CVE-2005-4890","There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via \"su - user -c program\". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.","2019-11-04",7.8,"v3.1",0.0063,{"cveId":171,"description":172,"publishedDate":173,"cvssScore":174,"cvssVersion":160,"severity":175,"isKev":17,"epssScore":176},"CVE-2006-1174","useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.","2006-05-28",3.7,"Low",0.00441,{"cveId":178,"description":179,"publishedDate":12,"cvssScore":167,"cvssVersion":168,"severity":161,"isKev":17,"epssScore":180},"CVE-2017-20002","The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts\u002F0 and pts\u002F1 as physical terminals in \u002Fetc\u002Fsecuretty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). This notably affects environments such as virtual machines automatically generated with a default blank root password, allowing all local users to escalate privileges.",0.00404,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"cvssVersion":160,"severity":186,"isKev":17,"epssScore":187},"CVE-2004-1001","Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.","2005-03-01",4.6,"Medium",0.00347,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":192,"cvssVersion":160,"severity":175,"isKev":17,"epssScore":193},"CVE-2006-1844","The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.","2006-04-19",2.1,0.00341,{"cveId":195,"description":196,"publishedDate":197,"cvssScore":198,"cvssVersion":168,"severity":186,"isKev":17,"epssScore":199},"CVE-2013-4235","shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees","2019-12-03",4.7,0.00307,[],{"title":202,"metaDescription":203,"keywords":204,"structuredData":205},"Shadow by Debian - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Shadow by Debian covering 45 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Shadow vulnerabilities, Shadow security, Shadow CVE, Debian Shadow, Shadow threat intelligence, Debian security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":206,"@type":207,"name":208,"description":203,"url":209,"manufacturer":210,"applicationCategory":214,"softwareVersion":215,"mainEntity":216},"https:\u002F\u002Fschema.org","SoftwareApplication","Shadow","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdebian\u002Fshadow",{"@type":211,"name":212,"url":213},"Organization","Debian","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fdebian","Security Software","45 versions tracked",{"@type":217,"name":218,"description":219,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Shadow Security Vulnerabilities","Security vulnerabilities affecting Shadow by Debian",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":221,"apiVersion":222},"2026-10-28T15:58:57.967Z","3.0",{"rows":224,"total":11,"capped":17,"failed":11},[],[]]