CVE:CVE-2017-20002
CNNVD:CNNVD-202103-1064
shadow是一套用于维护Debian系统的工具套件。
Debian shadow package before 4.5-1 存在安全漏洞，该漏洞允许本地用户作为无密码用户登录，允许所有本地用户升级特权。
solution:Upgrade debian shadow to a higher version than 4.4,and avoid the version 4.4; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0