Canonical · System-Tools-Backends · CVE-2008-6792
Name of the Vulnerable Software and Affected Versions:
system-tools-backends versions prior to 2.6.0-1ubuntu1.1
Description:
The issue allows context-dependent attackers to more easily conduct brute-force password attacks due to the use of 3DES for hashing account passwords, which limits effective password lengths to eight characters.
Recommendations:
For versions prior to 2.6.0-1ubuntu1.1, update to version 2.6.0-1ubuntu1.1 or later to resolve the issue.