Unrated severityNVD Advisory· Published Oct 8, 2001· Updated Jun 16, 2026
CVE-2001-1147
CVE-2001-1147
Description
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:andries_brouwer:util-linux:2.10s:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:andries_brouwer:util-linux:2.10s:*:*:*:*:*:*:*
- cpe:2.3:a:andries_brouwer:util-linux:2.11f:*:*:*:*:*:*:*
- cpe:2.3:a:andries_brouwer:util-linux:2.11h:*:*:*:*:*:*:*
- cpe:2.3:a:andries_brouwer:util-linux:2.11i:*:*:*:*:*:*:*
- cpe:2.3:a:andries_brouwer:util-linux:2.11k:*:*:*:*:*:*:*
- Range: <2.11
Patches
Vulnerability mechanics
References
7- www.iss.net/security_center/static/7266.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/3415nvdPatchVendor Advisory
- www.securityfocus.com/archive/1/219175nvdVendor Advisory
- www.ciac.org/ciac/bulletins/m-009.shtmlnvd
- www.linux-mandrake.com/en/security/2001/MDKSA-2001-084.php3nvd
- www.novell.com/linux/security/advisories/2001_034_shadow_txt.htmlnvd
- www.redhat.com/support/errata/RHSA-2001-132.htmlnvd
News mentions
0No linked articles in our index yet.