The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=94935300520617&w=2 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 1999-06-09 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2000-0118
Mitre link : CVE-2000-0118
CVE.ORG link : CVE-2000-0118
JSON object : View
Products Affected
sun
- sunos
- solaris
redhat
- linux
CWE