CVE-2004-1180: Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote...

Security readout for executives and security teams

CVE-2004-1180 is a remotely triggerable crash in the rwho daemon, rwhod, before version 0.17 on little endian systems. The impact described by the sources is denial of service, not data theft or code execution. Business urgency depends mainly on whether any legacy Unix/Linux hosts still expose rwhod. Exposure is most plausible on older Linux or Unix-like systems running rwhod, especially where the service is reachable over a network. Modern environments are less likely to run rwhod, but legacy administrative images and forgotten hosts should be checked. Treat this as a legacy exposure cleanup item unless rwhod is business-critical or externally reachable. Prioritize verification on older Linux fleets, because the issue can disrupt service but the supplied sources do not indicate broader compromise risk. Mitigation focus: Inventory systems for rwhod or rwho packages and enabled services.; Upgrade rwhod to 0.17 or vendor-fixed packages where available.; Review Debian, Mandriva, and Novell guidance for distribution-specific fixes..

Prepared

Jun 30, 2026, 00:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.