{"schema":"vulnpedia.research/1","cve":"CVE-2015-3245","references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html"}]},{"url":"https://www.exploit-db.com/exploits/44633/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"https://www.exploit-db.com/exploits/44633/"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"https://www.exploit-db.com/exploits/44633/"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"https://www.exploit-db.com/exploits/44633/"}]},{"url":"https://access.redhat.com/articles/1537873","tags":["x_refsource_CONFIRM","x_transferred","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"https://access.redhat.com/articles/1537873"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"https://access.redhat.com/articles/1537873"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"https://access.redhat.com/articles/1537873"},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://access.redhat.com/articles/1537873"}]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"http://rhn.redhat.com/errata/RHSA-2015-1482.html"}]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html"}]},{"url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt","tags":["x_refsource_MISC","x_transferred","Exploit"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt"}]},{"url":"http://www.securitytracker.com/id/1033040","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://www.securitytracker.com/id/1033040"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"http://www.securitytracker.com/id/1033040"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"http://www.securitytracker.com/id/1033040"}]},{"url":"http://www.securityfocus.com/bid/76021","tags":["vdb-entry","x_refsource_BID","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://www.securityfocus.com/bid/76021"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"http://www.securityfocus.com/bid/76021"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"http://www.securityfocus.com/bid/76021"}]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2018-05-19T09:57:01.000Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.007Z","url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html"},{"source":"nvd","sourceId":"CVE-2015-3245","modified":"2026-06-17T00:25:36.610","url":"http://rhn.redhat.com/errata/RHSA-2015-1483.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3245","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://access.redhat.com/security/cve/CVE-2015-3245"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233043","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233043"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3245","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2015-3245"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3245","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3245"}]},{"url":"https://access.redhat.com/errata/RHSA-2015:1482","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://access.redhat.com/errata/RHSA-2015:1482"}]},{"url":"https://access.redhat.com/errata/RHSA-2015:1483","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://access.redhat.com/errata/RHSA-2015:1483"}]},{"source":"euvd","sourceId":"EUVD-2015-3300","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3300","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2015-3300","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3300"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb","source":"metasploit","sourceId":"exploit/linux/local/libuser_roothelper_priv_esc","description":"Libuser roothelper Privilege Escalation","modified":"2026-04-22 11:57:34 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/linux/local/libuser_roothelper_priv_esc","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb"},{"source":"metasploit","sourceId":"exploit/linux/local/libuser_roothelper_priv_esc","modified":"2026-04-22 11:57:34 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/libuser_roothelper_priv_esc.rb"}],"tags":[]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Client-6.7.z:libuser-0:0.56.13-8.el6_7.i686","product":"libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Client-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64","product":"libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Client-optional-6.7.z:libuser-0:0.56.13-8.el6_7.ppc64","product":"libuser-0:0.56.13-8.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Client-optional-6.7.z:libuser-devel-0:0.56.13-8.el6_7.ppc","product":"libuser-devel-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.56.13-8.el6_7?arch=ppc","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6ComputeNode-6.7.z:libuser-0:0.56.13-8.el6_7.s390","product":"libuser-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux HPC Node (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=s390","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6ComputeNode-6.7.z:libuser-devel-0:0.56.13-8.el6_7.s390","product":"libuser-devel-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux HPC Node (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.56.13-8.el6_7?arch=s390","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6ComputeNode-optional-6.7.z:libuser-0:0.56.13-8.el6_7.src","product":"libuser-0:0.56.13-8.el6_7.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6ComputeNode-optional-6.7.z:libuser-devel-0:0.56.13-8.el6_7.s390x","product":"libuser-devel-0:0.56.13-8.el6_7.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.56.13-8.el6_7?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Server-6.7.z:libuser-0:0.56.13-8.el6_7.x86_64","product":"libuser-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Server-6.7.z:libuser-python-0:0.56.13-8.el6_7.i686","product":"libuser-python-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.56.13-8.el6_7?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.ppc","product":"libuser-debuginfo-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=ppc","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Server-optional-6.7.z:libuser-python-0:0.56.13-8.el6_7.ppc64","product":"libuser-python-0:0.56.13-8.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.56.13-8.el6_7?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Workstation-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390","product":"libuser-debuginfo-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=s390","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Workstation-6.7.z:libuser-python-0:0.56.13-8.el6_7.x86_64","product":"libuser-python-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.56.13-8.el6_7?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"6Workstation-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390x","product":"libuser-debuginfo-0:0.56.13-8.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1482"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.56.13-8.el6_7?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Client-7.1.Z:libuser-0:0.60-7.el7_1.i686","product":"libuser-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux Client (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Client-7.1.Z:libuser-devel-0:0.60-7.el7_1.i686","product":"libuser-devel-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux Client (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Client-optional-7.1.Z:libuser-0:0.60-7.el7_1.s390","product":"libuser-0:0.60-7.el7_1.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=s390","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Client-optional-7.1.Z:libuser-devel-0:0.60-7.el7_1.ppc64","product":"libuser-devel-0:0.60-7.el7_1.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7ComputeNode-7.1.Z:libuser-0:0.60-7.el7_1.x86_64","product":"libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7ComputeNode-7.1.Z:libuser-devel-0:0.60-7.el7_1.x86_64","product":"libuser-devel-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7ComputeNode-optional-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.ppc","product":"libuser-debuginfo-0:0.60-7.el7_1.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=ppc","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7ComputeNode-optional-7.1.Z:libuser-python-0:0.60-7.el7_1.x86_64","product":"libuser-python-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Server-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.s390x","product":"libuser-debuginfo-0:0.60-7.el7_1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Server-LE-7.1.Z:libuser-0:0.60-7.ael7b_1.src","product":"libuser-0:0.60-7.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.ael7b_1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Server-optional-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.ppc64","product":"libuser-debuginfo-0:0.60-7.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Server-optional-7.1.Z:libuser-python-0:0.60-7.el7_1.x86_64","product":"libuser-python-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Workstation-7.1.Z:libuser-0:0.60-7.el7_1.x86_64","product":"libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Workstation-7.1.Z:libuser-devel-0:0.60-7.el7_1.x86_64","product":"libuser-devel-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-devel@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Workstation-optional-7.1.Z:libuser-debuginfo-0:0.60-7.el7_1.ppc64","product":"libuser-debuginfo-0:0.60-7.el7_1.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-debuginfo@0.60-7.el7_1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"7Workstation-optional-7.1.Z:libuser-python-0:0.60-7.el7_1.x86_64","product":"libuser-python-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata \nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2015:1483"},{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."}],"purl":"pkg:rpm/redhat/libuser-python@0.60-7.el7_1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]},{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json","productId":"red_hat_enterprise_linux_5:libuser","product":"libuser as a component of Red Hat Enterprise Linux 5","status":"known_affected","remediations":[{"category":"workaround","details":"Add pam_warn and pam_deny rules to /etc/pam.d/chfn and /etc/pam.d/chsh to prevent non-root users from using this functionality.  With these edits, the files should contain:\n\n#%PAM-1.0\nauth       sufficient   pam_rootok.so\nauth required pam_warn.so\nauth required pam_deny.so\nauth       include      system-auth\naccount    include      system-auth\npassword   include      system-auth\nsession    include      system-auth\n\nAfterwards, attempts by unprivileged users to use chfn and chsh (and the respective functionality in the userhelper program) will fail, and will be logged (by default in /var/log/secure)."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/libuser?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2015-3245","modified":"2025-11-21T12:16:37+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3245.json"}]}],"vendorCoverage":{"total":371,"shown":32,"omitted":339,"source":"redhat"}}