vulnwire
7.2high

CVE-2000-01181 exploit

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attac…

Published 27 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
1
Exploit-DB

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Exploit prediction (EPSS)

0.79% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

Exploits and detections

  • EDB-19255 RedHat Linux 5.2 i386/6.0 - No Logging · local · 1999-06-09

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • marc.info /?l=bugtraq&m=94935300520617&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.