1. Home
  2. CVE Database
  3. CVE-2000-0118
HIGH · 7.2

CVE-2000-0118

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Vulnerability Description

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

CVSS Score

7.2

HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
RedhatLinux2.0
SunSolarisAll versions
SunSunos-

References

FAQ

What is CVE-2000-0118?

CVE-2000-0118 is a vulnerability with a CVSS score of 7.2 (HIGH). The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

How severe is CVE-2000-0118?

CVE-2000-0118 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2000-0118?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Linux, Sun Solaris, Sun Sunos.