CVE-2001-1467

2005-04-2104:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

80.3%

JSON

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.

References

archives.neohapsis.com/archives/bugtraq/2001-04/0173.html

archives.neohapsis.com/archives/bugtraq/2001-04/0192.html

securitytracker.com/id?1001303

www.kb.cert.org/vuls/id/527736

www.securityfocus.com/bid/2632

exchange.xforce.ibmcloud.com/vulnerabilities/6382