Unscored CVE-2001-0195 EUVD-2001-0195GHSA-5h99-8m23-j8rf

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gai…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

References

DSA-015 vendor-advisory
linux-sash-shadow-readable(5994) vdb-entry