Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html | |
http://www.securityfocus.com/bid/3204 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-08-30 21:00
Updated : 2008-09-05 13:25
NVD link : CVE-2001-0967
Mitre link : CVE-2001-0967
JSON object : View
CWE
Products Affected
knox_software
- arkeia