CVE-2001-0635

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.osvdb.org/5564
http://www.redhat.com/support/errata/RHSA-2001-058.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6493
http://www.osvdb.org/5564
http://www.redhat.com/support/errata/RHSA-2001-058.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6493

Timeline

Published: Aug 14, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-06367.5Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of Si CVE-2001-06414.6Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S opti CVE-2001-06422.1Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive b CVE-2001-06435.0Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the CVE-2001-06447.5Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which co CVE-2001-06457.5Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier CVE-2001-06465.0Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of CVE-2001-06475.0Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not inclu CVE-2001-06485.0Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (..CVE-2001-06495.0Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.CVE-2001-06505.0Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecogniz CVE-2001-06527.2Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESE