Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Iaz

#48895of 53,624
5Total CVSS
Vulnerabilities · 1
PT-2009-2261
5.0
2009-05-07
Canonical · System-Tools-Backends · CVE-2008-6792
Name of the Vulnerable Software and Affected Versions: system-tools-backends versions prior to 2.6.0-1ubuntu1.1 Description: The issue allows context-dependent attackers to more easily conduct brute-force password attacks due to the use of 3DES for hashing account passwords, which limits effective password lengths to eight characters. Recommendations: For versions prior to 2.6.0-1ubuntu1.1, update to version 2.6.0-1ubuntu1.1 or later to resolve the issue.