Home / Vulnerability Database / C or C++ : Unsafe function: getpw
C/C++
C or C++ : Unsafe function: getpw
Classification
PCI DSS 4.0
Overview
The getpw() function used is insecure because it may lead to a buffer overflow. This may lead to incorrect behavior or crash of the application.
The getpw() function reconstructs the password line entry for the given user ID uid in the buffer buf. The returned buffer contains a line of format name:passwd:uid:gid:gecos:dir:shell. The getpw() function is dangerous as it may overflow the provided buffer buf.
References
MEDIUM
DerScanner Severity Score
Do you want to fix C or C++ : Unsafe function: getpw in your application?
See also
C/C++
C or C++ : Dead store
C/C++
C or C++ : Use after free
C/C++
