The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Base-config | Debian | 2.53.10 (including) | 2.53.10 (including) |
| Shadow | Debian | 4.0.14 (including) | 4.0.14 (including) |