CVEvulnerability

CVE-2000-0118

7.2 HIGH Published 1999-06-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-06-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Affected configurations

• redhat linux 2.0 • redhat linux 2.1 • redhat linux 3.0.3 • redhat linux 4.0 • redhat linux 4.1 • redhat linux 4.2 • redhat linux 5.0 • redhat linux 5.1 • redhat linux 5.2 • redhat linux 6.0 • redhat linux 6.1 • sun solaris • sun solaris 1.1.3 • sun solaris 1.1.4 • sun solaris 2.4 • sun sunos • sun sunos 4.1.3 • sun sunos 4.1.4 • sun sunos 5.0 • sun sunos 5.1 • sun sunos 5.2 • sun sunos 5.3 • sun sunos 5.4 • sun sunos 5.5

References