{"id":"CVE-2017-20002","details":"The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH (hence bypassing PAM's nullok_secure configuration). This notably affects environments such as virtual machines automatically generated with a default blank root password, allowing all local users to escalate privileges.","modified":"2026-07-08T05:50:24.221285169Z","published":"2021-03-17T06:15:12.107Z","database_specific":{"unresolved_ranges":[{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877374"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00020.html"},{"type":"EVIDENCE","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914957"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/shadow-maint/shadow","events":[{"introduced":"68061f2059124f5aa450dfbf6bbad3e7a6f65f9f"},{"last_affected":"68061f2059124f5aa450dfbf6bbad3e7a6f65f9f"}],"database_specific":{"cpe":"cpe:2.3:a:debian:shadow:4.4:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.4"},{"last_affected":"4.4"}],"source":"CPE_STRING"}}],"versions":["4.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-20002.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}