BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
References
Configurations
Information
Published : 2006-04-04 03:04
Updated : 2017-10-10 18:30
NVD link : CVE-2006-1058
Mitre link : CVE-2006-1058
JSON object : View
CWE
Products Affected
busybox
- busybox