Unscored CVE-2001-1175 EUVD-2001-1156GHSA-cmf2-f2q8-mr4f

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local user…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.

References

vipw-world-readable-files(6851) vdb-entry
3036 vdb-entry
RHSA-2001:132 vendor-advisory
RHSA-2001:095 vendor-advisory