CVE-2001-0195

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-281

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 26, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-01965.0inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 byCVE-2001-019710.0Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.CVE-2001-01987.6Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter CVE-2001-01995.0Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the CVE-2001-02005.0HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will lisCVE-2001-02017.5The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arCVE-2001-02025.0Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.CVE-2001-020310.0Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a fCVE-2001-02045.0Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP pCVE-2001-02055.0Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the rCVE-2001-02065.0Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) oCVE-2001-020710.0Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a
CVE-2001-0195: High severity, CVSS 7.8 | Vulnix