PT-1999-1859 · Red Hat · Red Hat

Publicado 1999-06-09 · Atualizado 2018-10-30 · CVE-2000-0118

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Red Hat Linux (affected versions not specified)

Description: The issue concerns the Red Hat Linux su program, which fails to log failed password guesses if the su process is terminated before it times out. This allows local attackers to perform brute force password guessing without being detected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0118

Produtos afetados

Red Hat

Referências · 3

• 🔥 https://exploit-db.com/exploits/19255 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0118 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=94935300520617&w=2 · Nota