
Find real vulnerabilities before they ship
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
| Base Score | 7.2 |
|---|---|
| Vector String | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |