NetSight
high7.2

CVE-2001-1175

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute f…

Impact

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.

Affected products

VendorProductAffected versions
Andries BrouwerUtil-Linux
Versions 2.10s, 2.11d

References