CVE-2005-3503

CVE-2005-3503 describes a local privilege escalation vulnerability in the chfn utility, specifically affecting pwdutils version 3.0.4 and earlier on SuSE Linux and potentially other operating systems. The flaw stems from improper argument checking for the GECOS field, allowing a local attacker to gain elevated privileges. With a CVSS score of 7.2 (High), this vulnerability is easily exploitable locally with low complexity and can lead to complete compromise of confidentiality, integrity, and availability. While not on the KEV catalog or Hot List, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.