CVE-2001-0978

HP-UX 10.26 - Failed Login Attempts Not Recorded

Title source: llm
STIX 2.1

Description

login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8632.php
Patch issue-tracking x_refsource_hpbug
http://archives.neohapsis.com/archives/hp/2001-q3/0052.html
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3289

Scores

EPSS 0.0129
EPSS Percentile 79.9%

Details

Status published
Products (1)
hp/hp-ux 10.26
Published Sep 03, 2001
Tracked Since Feb 18, 2026