PT-2001-2325 · Mandrake · Mandrake Linux

Published 2001-12-12 · Updated 2008-09-05 · CVE-2001-1190

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mandrake Linux version 8.1

Description The default PAM files included with passwd in Mandrake Linux do not support MD5 passwords, which could result in a lower level of password security than intended.

Recommendations For Mandrake Linux version 8.1, consider updating the PAM files to support MD5 passwords to enhance password security.

Fix

Related Identifiers

CVE-2001-1190

Affected Products

Mandrake Linux

References · 4

• http://iss.net/security_center/static/7706.php · Vendor Advisory
• http://securityfocus.com/bid/3683 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1190 · Security Note
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-091.php3 · Patch, Vendor Advisory