{
  "id": "CVE-2000-0118",
  "sourceIdentifier": "cve@mitre.org",
  "published": "1999-06-09T04:00:00.000",
  "lastModified": "2018-10-30T16:26:22.170",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": true,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5302613E-F0DD-4B46-884C-49A977FD4147"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "674066BB-2576-4AAE-B97F-A4470815F1AC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:3.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "445EECD3-2DB9-43D1-B26F-0979A3C02D45"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9092D88-585D-4A0C-B181-E8D93563C74B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8211154-6685-4FF0-B3ED-43A5E5763A10"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F299301C-6BFC-436C-9CFD-2E291D3702AE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4EF44364-0F57-4B74-81B0-501EA6B58501"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:5.2:*:alpha:*:*:*:*:*",
              "matchCriteriaId": "07396B95-E434-46C9-A345-27C9EA9BEA26"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*",
              "matchCriteriaId": "363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:5.2:*:sparc:*:*:*:*:*",
              "matchCriteriaId": "0775CE08-C5AD-4FF7-AEA9-537B1EAE3BDE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*",
              "matchCriteriaId": "6931FB54-A163-4CE3-BBD9-D345AA0977A6"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*",
              "matchCriteriaId": "89F65C9D-BD68-4A86-BFDC-E7CE76F13948"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*",
              "matchCriteriaId": "5ABD1331-277C-4C31-8186-978243C62255"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*",
              "matchCriteriaId": "C89454B9-4F45-4A42-A06D-ED42D893C544"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*",
              "matchCriteriaId": "B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*",
              "matchCriteriaId": "1E64093E-7D53-4238-95C3-48ED5A0FFD97"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*",
              "matchCriteriaId": "FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:solaris:1.1.3:u1:*:*:*:*:*:*",
              "matchCriteriaId": "D3373737-C6FC-4D19-845C-B0382AE1DC48"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:solaris:1.1.4:*:jl:*:*:*:*:*",
              "matchCriteriaId": "10EC0267-500D-496F-9D88-7F93F7D4A88B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*",
              "matchCriteriaId": "1F881110-7B54-49DA-B23A-710273430C44"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "369207B4-96FA-4324-9445-98FAE8ECF5DB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "615FA6E4-4DE0-422A-9220-F747D95192C9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1070749A-65E9-439A-A7CC-3CE529A5D5E7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1370216-93EB-400F-9AA6-CB2DC316DAA7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "84523B48-218B-45F4-9C04-2C103612DCB2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7A22D21-E0A9-4B56-86C7-805AD1A610D6"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B72953B-E873-4E44-A3CF-12D770A0D416"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=94935300520617&w=2",
      "source": "cve@mitre.org"
    }
  ]
}