CNCVE编号:CNCVE-20010195 CVE编号:CVE-2001-0195 安全级别:中 漏洞中文描述: Debian Linux中的sash 3.4-4以前的版本不能正确的复制/etc/shadow,这使得它可读并允许本地用户通过破解口令来获得权限。 漏洞英文描述: sash before 3.4-4 in Debian Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking. 漏洞参考: XF:linux-sash-shadow-readable DEBIAN:DSA-015 系统类型:其他 漏洞类型:环境错误