PT-1999-1859 · Red Hat · Red Hat

Published 1999-06-09 · Updated 2018-10-30 · CVE-2000-0118

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Red Hat Linux (affected versions not specified)

Description: The issue concerns the Red Hat Linux su program, which fails to log failed password guesses if the su process is terminated before it times out. This allows local attackers to perform brute force password guessing without being detected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0118

Affected Products

Red Hat

References · 3

• 🔥 https://exploit-db.com/exploits/19255 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0118 · Security Note
• http://marc.info/?l=bugtraq&m=94935300520617&w=2 · Note