CVE-2001-1467

CVE-2001-1467 describes a weakness in the mkpasswd utility within expect 5.2.8, specifically as used in Red Hat Linux versions 6.2 through 7.0. This vulnerability stems from mkpasswd seeding its random number generator with its process ID, severely limiting the randomness of generated passwords. With a CVSS score of 7.5 (HIGH), this flaw allows unauthenticated attackers to conduct brute-force password attacks more easily, potentially leading to compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.