CVE-2001-1467: Don Libes Expect

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.

Affected products

• Don Libes Expect: version 5.2.8 only

Published 2001-04-11. Last modified 2026-06-16.