Lucene search
HistoryApr 11, 2001 - 4:00 a.m.
CVE-2001-1467
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.007
Percentile
80.3%
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.
Affected configurations
Node
don_libesexpectMatch5.2.8
Related
cvelist
cvelist
CVE-2001-1467
2005-04-21 04:00:00
debiancve
debiancve
CVE-2001-1467
2005-04-21 04:00:00
cve
cve
CVE-2001-1467
2005-04-21 04:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.007
Percentile
80.3%
Related for NVD:CVE-2001-1467