Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2001-1467

HistoryApr 21, 2005 - 4:00 a.m.

CVE-2001-1467

2005-04-2104:00:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

80.3%

JSON

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.

OSVersionArchitecturePackageVersionFilename
Debian12allexpect< 5.45.4-2expect_5.45.4-2_all.deb
Debian11allexpect< 5.45.4-2expect_5.45.4-2_all.deb
Debian999allexpect< 5.45.4-3expect_5.45.4-3_all.deb
Debian13allexpect< 5.45.4-3expect_5.45.4-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	expect	< 5.45.4-2	expect_5.45.4-2_all.deb
Debian	11	all	expect	< 5.45.4-2	expect_5.45.4-2_all.deb
Debian	999	all	expect	< 5.45.4-3	expect_5.45.4-3_all.deb
Debian	13	all	expect	< 5.45.4-3	expect_5.45.4-3_all.deb

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

80.3%

JSON

Related for DEBIANCVE:CVE-2001-1467