CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2001-03-26

Last modified

2024-08-08

Weaknesses

CWE-281

Affected products

• Debian Linux (Debian)

References

• http://www.debian.org/security/2001/dsa-015
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5994