World-readable /etc/shadow file in Debian GNU/Linux before 3.4-4 allows local privilege escalation through password cracking

CVE-2001-0195 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

Learn more about our Cis Benchmark Audit For Debian Linux.