CVE-2000-0118

CVE-2000-0118 describes a vulnerability in the Red Hat Linux su program where failed password attempts are not logged if the su process is terminated before timing out. This flaw allows local attackers to perform brute-force password guessing against user accounts. The vulnerability is rated as HIGH severity with a CVSS score of 7.2, indicating a local attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not actively exploited in the wild or on the KEV catalog, an exploit (EDB-19255) is available on ExploitDB, though there is no evidence of widespread community discussion or media coverage.