7.2
CVE-2001-1175
- EPSS 0.43%
- Veröffentlicht 01.04.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:55:43
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginvipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Andries Brouwer ≫ Util-linux Version2.10s
Andries Brouwer ≫ Util-linux Version2.11d
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.43% | 0.338 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://www.redhat.com/support/errata/RHSA-2001-132.html
http://www.redhat.com/support/errata/RHSA-2001-095.html
http://www.securityfocus.com/bid/3036
https://exchange.xforce.ibmcloud.com/vulnerabilities/6851