Lucene search

K
cve[email protected]CVE-2000-0361
HistoryDec 14, 1999 - 5:00 a.m.

CVE-2000-0361

1999-12-1405:00:00
NVD-CWE-Other
web.nvd.nist.gov
28
ppp wvdial.lxdialog
wvdial 1.4
world readable permissions
login info access
cve-2000-0361.

7.2 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq*

7.2 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%