CVE-2001-1175: High severity Andries Brouwer Util-linux vulnerability
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1175?
CVE-2001-1175 has a medium severity rating due to the potential exposure of the /etc/shadow file which can facilitate brute force attacks.
How do I fix CVE-2001-1175?
To fix CVE-2001-1175, upgrade your util-linux package to a version newer than 2.11d.
What systems are affected by CVE-2001-1175?
CVE-2001-1175 affects versions of the util-linux package prior to 2.10 and includes specific versions like 2.10s and 2.11d.
What could happen if CVE-2001-1175 is exploited?
If CVE-2001-1175 is exploited, local users could gain unauthorized access to password hashes, making it easier to perform brute force password guessing.
Is CVE-2001-1175 still a relevant vulnerability today?
While CVE-2001-1175 was critical at the time, it is less relevant today due to the availability of newer software versions that fix the vulnerability.