## Description

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### redhat - linux

Affected Versions:

- 2.0

### redhat - linux

Affected Versions:

- 2.1

### redhat - linux

Affected Versions:

- 3.0.3

### redhat - linux

Affected Versions:

- 4.0

### redhat - linux

Affected Versions:

- 4.1

### redhat - linux

Affected Versions:

- 4.2

### redhat - linux

Affected Versions:

- 5.0

### redhat - linux

Affected Versions:

- 5.1

### redhat - linux

Affected Versions:

- 5.2

### redhat - linux

Affected Versions:

- 5.2

### redhat - linux

Affected Versions:

- 5.2

### redhat - linux

Affected Versions:

- 6.0

### redhat - linux

Affected Versions:

- 6.0

### redhat - linux

Affected Versions:

- 6.0

### redhat - linux

Affected Versions:

- 6.1

### redhat - linux

Affected Versions:

- 6.1

### redhat - linux

Affected Versions:

- 6.1

### sun - solaris

Affected Versions:

- *

### sun - solaris

Affected Versions:

- 1.1.3

### sun - solaris

Affected Versions:

- 1.1.4

### sun - solaris

Affected Versions:

- 2.4

### sun - sunos

Affected Versions:

- -

### sun - sunos

Affected Versions:

- 4.1.3

### sun - sunos

Affected Versions:

- 4.1.4

### sun - sunos

Affected Versions:

- 5.0

### sun - sunos

Affected Versions:

- 5.1

### sun - sunos

Affected Versions:

- 5.2

### sun - sunos

Affected Versions:

- 5.3

### sun - sunos

Affected Versions:

- 5.4

### sun - sunos

Affected Versions:

- 5.5

## References

- http://marc.info/?l=bugtraq&m=94935300520617&w=2
- http://marc.info/?l=bugtraq&m=94935300520617&w=2

Neural Processor Active