vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
References
Link | Resource |
---|---|
http://www.redhat.com/support/errata/RHSA-2001-095.html | Patch Vendor Advisory |
http://www.securityfocus.com/bid/3036 | Patch Vendor Advisory |
http://www.redhat.com/support/errata/RHSA-2001-132.html | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/6851 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2002-03-31 21:00
Updated : 2017-10-09 18:30
NVD link : CVE-2001-1175
Mitre link : CVE-2001-1175
JSON object : View
CWE
Products Affected
andries_brouwer
- util-linux