CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

• CWE-281

• http://www.debian.org/security/2001/dsa-015Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5994Third Party Advisory, VDB Entry
• http://www.debian.org/security/2001/dsa-015Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5994Third Party Advisory, VDB Entry

Published

Mar 26, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0189Directory traversal vulnerability in LocalWEB2000 HTTP serve…
• CVE-2001-0190Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, a…
• CVE-2001-0191gnuserv before 3.12, as shipped with XEmacs, does not proper…
• CVE-2001-0192Buffer overflows in CTRLServer in XMail allows attackers to …
• CVE-2001-0193Format string vulnerability in man in some Linux distributio…
• CVE-2001-0194Buffer overflow in httpGets function in CUPS 1.1.5 allows re…
• CVE-2001-0196inetd ident server in FreeBSD 4.x and earlier does not prope…
• CVE-2001-0197Format string vulnerability in print_client in icecast 1.3.8…
• CVE-2001-0198Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) …
• CVE-2001-0199Directory traversal vulnerability in SEDUM HTTP Server 2.0 a…
• CVE-2001-0200HSWeb 2.0 HTTP server allows remote attackers to obtain the …
• CVE-2001-0201The Postaci frontend for PostgreSQL does not properly filter…