CVE-2017-20002: debian debian_linux Improper Privilege Management
Vulnerability summary
CVE-2017-20002 is a high (CVSS 7.8) Improper Privilege Management vulnerability in debian debian_linux. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 17-03-2021PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). This notably affects environments such as virtual machines automatically generated with a default blank root password, allowing all local users to escalate privileges.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
0.00 pp
From 0.40% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugs.debian.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian3 products
- shadow< 1:4.5-1
- debian_linuxEOL9.0
- shadow4.4
Ubuntu1 product
- shadow< 1:4.2-3.1ubuntu5.4 | < 1:4.5-1ubuntu2
2 vendors · 4 products
References
6 links
- bugs.debian.org/cgi-bin/bugreport.cgi?bug=914957X Refsource MISCExploitMailing ListVendor AdvisoryREPORT
- lists.debian.org/debian-lts-announce/2021/03/msg00020.htmlMailing ListX Refsource MLISTVendor AdvisoryREPORT