Debian Security Advisory 1177-1 - Hendrik Weimer discovered that it is possible for a normal user to disable the login shell of the root account via usermin, a web-based administration tool.
b68001507b7777908f508eebc31fd47b3262dd03cbac031d4ca7b25fee50dba1