7.2

CVE-2000-0118

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Linux Version2.0
Redhat ≫ Linux Version2.1
Redhat ≫ Linux Version3.0.3
Redhat ≫ Linux Version4.0
Redhat ≫ Linux Version4.1
Redhat ≫ Linux Version4.2
Redhat ≫ Linux Version5.0
Redhat ≫ Linux Version5.1
Redhat ≫ Linux Version5.2 Editionalpha
Redhat ≫ Linux Version5.2 Editioni386
Redhat ≫ Linux Version5.2 Editionsparc
Redhat ≫ Linux Version6.0 Editionalpha
Redhat ≫ Linux Version6.0 Editioni386
Redhat ≫ Linux Version6.0 Editionsparc
Redhat ≫ Linux Version6.1 Editionalpha
Redhat ≫ Linux Version6.1 Editioni386
Redhat ≫ Linux Version6.1 Editionsparc
Sun ≫ Solaris Editionx86
Sun ≫ Solaris Version1.1.3 Updateu1
Sun ≫ Solaris Version1.1.4 Editionjl
Sun ≫ Solaris Version2.4 Editionx86
Sun ≫ Sunos Version-
Sun ≫ Sunos Version4.1.3
Sun ≫ Sunos Version4.1.4
Sun ≫ Sunos Version5.0
Sun ≫ Sunos Version5.1
Sun ≫ Sunos Version5.2
Sun ≫ Sunos Version5.3
Sun ≫ Sunos Version5.4
Sun ≫ Sunos Version5.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.15% 0.318
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C