CVE-2000-0118

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.79% chance of exploitation in the next 30 days, 54th percentile

Published

2000-02-08

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19255

References

• CVE Record
• NVD entry

Related

• CVE-2000-0116
• CVE-2000-0119
• CVE-2000-0114
• CVE-2000-0121
• CVE-2000-0109
• CVE-2000-0125