CVE:CVE-2000-0118
CNNVD:CNNVD-199906-015
Red Hat Linux su程序存在漏洞。如果su过程在超时之前被终止，该程序不能记录失败的密码猜测，本地攻击者可以利用该漏洞进行蛮力密码猜测。
solution:Upgrade redhat linux to a higher version than 2.0,2.1,3.0.3,4.0,4.1,4.2,5.0,5.1,5.2,6.0,6.1,and avoid the version 2.0,2.1,3.0.3,4.0,4.1,4.2,5.0,5.1,5.2,6.0,6.1; Upgrade sun solaris to a higher version than *,1.1.3:u1,1.1.4,2.4,and avoid the version 1.1.3:u1,1.1.4,2.4; Upgrade sun sunos to a higher version than -,4.1.3,4.1.4,5.0,5.1,5.2,5.3,5.4,5.5,and avoid the version 4.1.3,4.1.4,5.0,5.1,5.2,5.3,5.4,5.5