CVE-2001-1175: Andries Brouwer Util-Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.

Affected products

• Andries Brouwer Util-Linux: version 2.10s only; version 2.11d only

Published 2002-04-01. Last modified 2026-06-16.