Korean
<< Back
VID 14071
Severity 20
Port 22
Protocol TCP
Class LSC
Detailed Description There are GIDs which have no users in the host system. If there are groups which don't have any users cuased by insecure group management, the groups' file can be exposed to unauthorized users. so GIDs which have no users should be deleted.

* Platforms Affected:
UNIX, Linux
Recommendation Delete the groups which don't have any users as the following
groupdel 'group name which has no users'
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)