A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
| Software | From | Fixed in |
|---|---|---|
| caldera / coas | 1.0.5 | 1.0.5.x |
| caldera / coas | 1.0.6 | 1.0.6.x |
| caldera / coas | 1.0.7 | 1.0.7.x |
| caldera / openlinux | 2.2 | 2.2.x |