7.2high
CVE-2001-1017
rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 31%
Public exploits
0
none known
Summary
rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords.
Exploit prediction (EPSS)
0.37% probability of exploitation in the next 30 days, higher than 31% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
- securityfocus.com /bid/3282 · vdb-entry, x_refsource_BID, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/7086 · vdb-entry, x_refsource_XF, x_transferred
- osvdb.org /1947 · vdb-entry, x_refsource_OSVDB, x_transferred
Sources
- CVE List: CVE-2001-1017
- NVD: CVE-2001-1017
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.