Vulnerabilities > CVE-2001-1175 - Unspecified vulnerability in Andries Brouwer Util-Linux 2.10S/2.11D

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
andries-brouwer
NVD
Published: 2002-04-01
Updated: 2024-11-20

Summary

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.

Vulnerable Configurations

Part Description Count
Application
Andries_Brouwer
2

Redhat

advisories
  • rhsa
    idRHSA-2001:095
  • rhsa
    idRHSA-2001:132

References