PT-2001-2119 · Knox · Knox Arkeia Server

CVE-2001-0967 · Publicado 2001-08-31 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Knox Arkeia server version 4.2

Description The issue is related to the use of a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.

Recommendations For Knox Arkeia server version 4.2, consider updating the password encryption mechanism to use a unique salt for each user to prevent brute force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-916

Identificadores relacionados

CVE-2001-0967

Produtos afetados

Knox Arkeia Server

Referências · 4

• https://t.me/cvenotify/71377 · Publicação no Telegram
• http://securityfocus.com/bid/3204 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0967 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html · Nota