CVE-2001-0195: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

Affected products

• Debian Debian Linux: version 2.2 only

Published 2001-03-26. Last modified 2026-06-16.