CVE:CVE-2001-1175
CNNVD:CNNVD-200204-001
util-linux package 2.10之前版本的vipw在某些情况下导致/etc/shadow全域可读。本地用户能更容易执行强力密码猜测。
solution:Upgrade andries_brouwer util-linux to a higher version than 2.10s,2.11d,and avoid the version 2.10s,2.11d