{"affected":[{"conditional":false,"product":"util-linux","source":"NVD","vendor":"andries_brouwer","versions":[{"status":"affected","version":"2.10s","versionType":"custom"}]},{"conditional":false,"product":"util-linux","source":"NVD","vendor":"andries_brouwer","versions":[{"status":"affected","version":"2.11d","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.10s:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.11d:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2001-1175","cwes":[],"description":"vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.2,"severity":"high","source":"NVD: nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"}],"modifiedAt":1794442200150,"publishedAt":1017637200000,"references":[{"source":"cve@mitre.org","tags":["Patch","Vendor Advisory"],"url":"http://www.redhat.com/support/errata/RHSA-2001-095.html"},{"source":"cve@mitre.org","tags":[],"url":"http://www.redhat.com/support/errata/RHSA-2001-132.html"},{"source":"cve@mitre.org","tags":["Patch","Vendor Advisory"],"url":"http://www.securityfocus.com/bid/3036"},{"source":"cve@mitre.org","tags":[],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6851"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"http://www.redhat.com/support/errata/RHSA-2001-095.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"http://www.redhat.com/support/errata/RHSA-2001-132.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"http://www.securityfocus.com/bid/3036"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6851"}],"remediation":[{"kind":"fix","source":"cve@mitre.org","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"http://www.redhat.com/support/errata/RHSA-2001-095.html"},{"kind":"fix","source":"cve@mitre.org","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"http://www.securityfocus.com/bid/3036"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"http://www.redhat.com/support/errata/RHSA-2001-095.html"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"http://www.securityfocus.com/bid/3036"}],"revision":"d812afbc5a3d1eab4dc592403b420b01d699df1ff038d932fd1eb0b3753df5c3","sources":[{"modifiedAt":1794442200150,"name":"NVD","retrievedAt":1794442562104,"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1175"}],"ssvc":null,"status":"published","title":"CVE-2001-1175","updatedAt":1794442562104}