[Bug 2076898] [NEW] Numeric name is accepted as valid username for useradd/groupadd

Hector CAO 2076898 at bugs.launchpad.net
Tue Aug 13 09:57:50 UTC 2024


Public bug reported:

Pure numeric names (example 0, 100) should be considered as invalid group and user names
The command useradd and groupadd must refuse them

This is not the case in the latest version of shadow : 1:4.15.3-3ubuntu1

When we issue:

$ useradd 0

The command succeeds instead of failing.

** Affects: shadow (Ubuntu)
     Importance: Undecided
     Assignee: Hector CAO (hectorcao)
         Status: In Progress

** Changed in: shadow (Ubuntu)
       Status: New => In Progress

** Changed in: shadow (Ubuntu)
     Assignee: (unassigned) => Hector CAO (hectorcao)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/2076898

Title:
  Numeric name is accepted as valid username for useradd/groupadd

Status in shadow package in Ubuntu:
  In Progress

Bug description:
  Pure numeric names (example 0, 100) should be considered as invalid group and user names
  The command useradd and groupadd must refuse them

  This is not the case in the latest version of shadow :
  1:4.15.3-3ubuntu1

  When we issue:

  $ useradd 0

  The command succeeds instead of failing.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/2076898/+subscriptions




More information about the foundations-bugs mailing list