iple CRLF injection vulnerabilities in (1) chfn and (2) chsh in ...</td></tr><tr><td><a href="/tracker/CVE-2008-5394">CVE-2008-5394</a></td><td>/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other ...</td></tr><tr><td><a href="/tracker/CVE-2006-3597">CVE-2006-3597</a></td><td>passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password ...</td></tr><tr><td><a href="/tracker/CVE-2006-3378">CVE-2006-3378</a></td><td>passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called .