PT-2000-1431 · Passwd · Passwd

Publicado 2000-06-04 · Atualizado 2008-09-10 · CVE-2000-0492

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PassWD version 1.2

Description The issue concerns the use of weak encryption, specifically trivial encoding, to store passwords. This allows an attacker with read access to the password file to easily decrypt the passwords.

Recommendations For PassWD version 1.2, consider updating the password storage mechanism to use a secure encryption method to protect passwords. As a temporary workaround, restrict access to the password file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-0492

Produtos afetados

Passwd

Referências · 4

• 🔥 https://exploit-db.com/exploits/19989 · Exploit
• http://securityfocus.com/bid/1300 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0492 · Nota de Segurança