CVE-2000-0118
Summary
| CVE | CVE-2000-0118 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 1999-06-09 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing. |
Risk And Classification
Primary CVSS: v2.0 7.2 from [email protected]
AV:L/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:L/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Redhat | Linux | 2.0 | All | All | All |
| Operating System | Redhat | Linux | 2.1 | All | All | All |
| Operating System | Redhat | Linux | 3.0.3 | All | All | All |
| Operating System | Redhat | Linux | 4.0 | All | All | All |
| Operating System | Redhat | Linux | 4.1 | All | All | All |
| Operating System | Redhat | Linux | 4.2 | All | All | All |
| Operating System | Redhat | Linux | 5.0 | All | All | All |
| Operating System | Redhat | Linux | 5.1 | All | All | All |
| Operating System | Redhat | Linux | 5.2 | All | alpha | All |
| Operating System | Redhat | Linux | 5.2 | All | i386 | All |
| Operating System | Redhat | Linux | 5.2 | All | sparc | All |
| Operating System | Redhat | Linux | 6.0 | All | alpha | All |
| Operating System | Redhat | Linux | 6.0 | All | i386 | All |
| Operating System | Redhat | Linux | 6.0 | All | sparc | All |
| Operating System | Redhat | Linux | 6.1 | All | alpha | All |
| Operating System | Redhat | Linux | 6.1 | All | i386 | All |
| Operating System | Redhat | Linux | 6.1 | All | sparc | All |
| Operating System | Sun | Solaris | All | All | x86 | All |
| Operating System | Sun | Solaris | 1.1.3 | u1 | All | All |
| Operating System | Sun | Solaris | 1.1.4 | All | jl | All |
| Operating System | Sun | Solaris | 2.4 | All | x86 | All |
| Operating System | Sun | Sunos | - | All | All | All |
| Operating System | Sun | Sunos | 4.1.3 | All | All | All |
| Operating System | Sun | Sunos | 4.1.4 | All | All | All |
| Operating System | Sun | Sunos | 5.0 | All | All | All |
| Operating System | Sun | Sunos | 5.1 | All | All | All |
| Operating System | Sun | Sunos | 5.2 | All | All | All |
| Operating System | Sun | Sunos | 5.3 | All | All | All |
| Operating System | Sun | Sunos | 5.4 | All | All | All |
| Operating System | Sun | Sunos | 5.5 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 'RedHat 6.1 /and others/ PAM' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.