CVE catalog

CVE-2001-1467

expect: CVE-2001-1467

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
2.61% · Oct 25, 2026

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianexpectsid5.45.4-10not affected
Debianexpectforky5.45.4-10not affected
Debianexpecttrixie5.45.4-4not affected
Debianexpectbookworm5.45.4-2not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianexpectsourcesidNot affectedunimportantNot reportedNot reported
DebianexpectsourceforkyNot affectedunimportantNot reportedNot reported
DebianexpectsourcetrixieNot affectedunimportantNot reportedNot reported
DebianexpectsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [expect]Not affected

    Source package: [expect]

    Details (2)
    • 5.45.4-2+b1 · amd64 · bookworm

      Not affected

      dsa · expect · debian · bookworm

    • 5.45.4-2+b1 · arm64 · bookworm

      Not affected

      dsa · expect · debian · bookworm

  • [tcl-expect]Not affected

    Source package: [expect]

    Details (2)
    • 5.45.4-2+b1 · amd64 · bookworm

      Not affected

      dsa · expect · debian · bookworm

    • 5.45.4-2+b1 · arm64 · bookworm

      Not affected

      dsa · expect · debian · bookworm

  • [tcl-expect-dev]Not affected

    Source package: [expect]

    Details (2)
    • 5.45.4-2+b1 · amd64 · bookworm

      Not affected

      dsa · expect · debian · bookworm

    • 5.45.4-2+b1 · arm64 · bookworm

      Not affected

      dsa · expect · debian · bookworm

Observed:

References