SUSE Security Announcement – Thomas Gerisch found that the setuid ‘chfn’ program contained in the pwdutils suite insufficiently checks it’s arguments when changing the GECOS field. This bug leads to a trivially exploitable local privilege escalation that allows users to gain root access.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41294/SUSE-SA-2005-064.txt
Source: https://packetstormsecurity.com/files/41294/SUSE-SA-2005-064.txt.html