Is CVE-2000-0118 being actively exploited?

CVE-2000-0118 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2000-0118?

CVE-2000-0118 has a CVSS 2.0 base score of 7.2 (HIGH).

CVE-2000-0118

HIGH · CVSS 7.2EPSS 0.8%EU EUVD

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

Key facts

CVSS score: 7.2 (v2.0)
Severity: HIGH
CVSS vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS score: 0.8% (55th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2000-0117)
Published: June 9, 1999
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2000-0117 in the EU Vulnerability Database. Last updated in EUVD on August 8, 2024.

View on the EU Vulnerability Database

Affected products

redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
redhat / linux
sun / solaris
sun / solaris
sun / solaris
sun / solaris
sun / sunos
sun / sunos
sun / sunos
sun / sunos
sun / sunos
sun / sunos
sun / sunos
sun / sunos
sun / sunos

Certified products that may be affected

5 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux Kernel Crypto API Cryptographic Module v4.0 with CPACF - Red Hat®, Inc. - FIPS 140 2798 - historical
Red Hat Enterprise Linux Kernel Crypto API Cryptographic Module v4.0 - Red Hat®, Inc. - FIPS 140 2742 - historical
Red Hat Enterprise Linux Libreswan Cryptographic Module v4.0 - Red Hat®, Inc. - FIPS 140 2721 - historical
Red Hat Enterprise Linux NSS Cryptographic Module v4.0 - Red Hat®, Inc. - FIPS 140 2711 - historical
Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2] - Red Hat®, Inc. - FIPS 140 2657 - historical

References

http://marc.info/?l=bugtraq&m=94935300520617&w=2

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain