high7.2Public exploit code
CVE-2000-0118
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RedHat Linux 5.2 i386/6.0 - No Logging1999-06-09 · local · linux · Verified
Impact
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Linux | Versions 2.0, 2.1, 3.0.3, 4.0, 4.1, 4.2 |
| Sun | Solaris | All versions Versions 1.1.3, 1.1.4, 2.4 |
| Sun | Sunos | All versions Versions 4.1.3, 4.1.4, 5.0, 5.1, 5.2 |