The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2000-0117 | The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| http://marc.info/?l=bugtraq&m=94935300520617&w=2 |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T05:05:53.936Z
Reserved: 2000-02-08T00:00:00
Link: CVE-2000-0118
No data.
Status : Deferred
Published: 1999-06-09T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2000-0118
No data.
OpenCVE Enrichment
No data.
EUVD