[Bug 2076898] [NEW] Numeric name is accepted as valid username for useradd/groupadd
Hector CAO
2076898 at bugs.launchpad.net
Tue Aug 13 09:57:50 UTC 2024
Public bug reported:
Pure numeric names (example 0, 100) should be considered as invalid group and user names
The command useradd and groupadd must refuse them
This is not the case in the latest version of shadow : 1:4.15.3-3ubuntu1
When we issue:
$ useradd 0
The command succeeds instead of failing.
** Affects: shadow (Ubuntu)
Importance: Undecided
Assignee: Hector CAO (hectorcao)
Status: In Progress
** Changed in: shadow (Ubuntu)
Status: New => In Progress
** Changed in: shadow (Ubuntu)
Assignee: (unassigned) => Hector CAO (hectorcao)
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/2076898
Title:
Numeric name is accepted as valid username for useradd/groupadd
Status in shadow package in Ubuntu:
In Progress
Bug description:
Pure numeric names (example 0, 100) should be considered as invalid group and user names
The command useradd and groupadd must refuse them
This is not the case in the latest version of shadow :
1:4.15.3-3ubuntu1
When we issue:
$ useradd 0
The command succeeds instead of failing.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/2076898/+subscriptions
More information about the foundations-bugs
mailing list