vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.redhat.com/support/errata/RHSA-2001-095.html | Patch Vendor Advisory | 
| http://www.securityfocus.com/bid/3036 | Patch Vendor Advisory | 
| http://www.redhat.com/support/errata/RHSA-2001-132.html | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6851 | 
Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Information
                Published : 2002-03-31 21:00
Updated : 2017-10-09 18:30
NVD link : CVE-2001-1175
Mitre link : CVE-2001-1175
JSON object : View
CWE
                Products Affected
                andries_brouwer
- util-linux
 


