sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.
References
Link | Resource |
---|---|
http://www.debian.org/security/2001/dsa-015 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/5994 |
Configurations
Information
Published : 2001-03-25 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2001-0195
Mitre link : CVE-2001-0195
JSON object : View
CWE
Products Affected
debian
- debian_linux