Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1467
cve
expect
mkpasswd
rng
brute force
password
attack
redhat
linux
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.4%
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.
Affected configurations
Node
don_libesexpectMatch5.2.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| don_libes:expect | don libes expect | eq | 5.2.8 |
Related
nvd
nvd
CVE-2001-1467
2001-04-11 04:00:00
cvelist
cvelist
CVE-2001-1467
2005-04-21 04:00:00
debiancve
debiancve
CVE-2001-1467
2005-04-21 04:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.4%
Related for CVE-2001-1467