{"id":"CVE-2000-0361","aliases":["EUVD-2000-0360","GHSA-3p92-jw9p-xx95"],"status":"published","title":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world...","description":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00335,"percentile":0.27166,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"1999-12-14T05:00:00Z","modified":"2026-06-16T21:51:33Z","products":[{"vendor":"suse","product":"suse_linux"}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_35.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-0361"},{"url":"https://github.com/advisories/GHSA-3p92-jw9p-xx95"}],"sources":{"cve":[{"id":"CVE-2000-0361","description":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.","status":"published","published":"2000-07-12T04:00:00Z","modified":"2024-08-08T05:14:21.443Z","updated_at":"2026-11-02T14:33:41.23606Z"}],"euvd":[{"id":"EUVD-2000-0360","description":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.","status":"published","published":"2000-07-12T04:00:00Z","modified":"2024-08-08T05:14:21Z","updated_at":"2026-11-03T00:56:25.511445Z"}],"ghsa":[{"id":"GHSA-3p92-jw9p-xx95","title":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world...","description":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.","status":"published","published":"2022-04-30T18:13:28Z","modified":"2023-01-30T05:04:59Z","updated_at":"2026-11-02T14:47:10.094761Z"}],"nvd":[{"id":"CVE-2000-0361","description":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.","status":"published","published":"1999-12-14T05:00:00Z","modified":"2026-06-16T21:51:33.42Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T13:58:40.923898Z"}]}}
