CVE-2000-0118

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jun 9, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01197.2The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used CVE-2000-01207.5The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.CVE-2000-01213.6The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim CVE-2000-01225.0Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.e CVE-2000-01237.5The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01242.1surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access CVE-2000-01257.5wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privi CVE-2000-01265.0Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.CVE-2000-01277.5The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privilege CVE-2000-012810.0The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.CVE-2000-01292.1Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a L CVE-2000-01307.2Buffer overflow in SCO scohelp program allows remote attackers to execute commands.