CVE-2000-0118: Red Hat Linux

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Affected products

• Red Hat Linux: version 2.0 only; version 2.1 only; version 3.0.3 only; version 4.0 only; version 4.1 only; version 4.2 only; …
• Sun Solaris: any version; version 1.1.3 only; version 1.1.4 only; version 2.4 only
• Sun Sunos: affected versions not specified; version 4.1.3 only; version 4.1.4 only; version 5.0 only; version 5.1 only; version 5.2 only; …

Published 1999-06-09. Last modified 2026-06-16.