CVE

Id
17162  
CVE No.
CVE-2006-1058  
Status
Candidate  
Description
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.  
Phase
Assigned (20060307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
140745 17162 CVE-2006-1058 CONFIRM:http://bugs.busybox.net/view.php?id=604  View
140746 17162 CVE-2006-1058 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm  View
140747 17162 CVE-2006-1058 REDHAT:RHSA-2007:0244  View
140748 17162 CVE-2006-1058 URL:http://www.redhat.com/support/errata/RHSA-2007-0244.html  View
140749 17162 CVE-2006-1058 BID:17330  View
140750 17162 CVE-2006-1058 URL:http://www.securityfocus.com/bid/17330  View
140751 17162 CVE-2006-1058 OVAL:oval:org.mitre.oval:def:9483  View
140752 17162 CVE-2006-1058 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9483  View
140753 17162 CVE-2006-1058 SECUNIA:19477  View
140754 17162 CVE-2006-1058 URL:http://secunia.com/advisories/19477  View
140755 17162 CVE-2006-1058 SECUNIA:25098  View
140756 17162 CVE-2006-1058 URL:http://secunia.com/advisories/25098  View
140757 17162 CVE-2006-1058 SECUNIA:25848  View
140758 17162 CVE-2006-1058 URL:http://secunia.com/advisories/25848  View
140759 17162 CVE-2006-1058 XF:busybox-passwd-weak-security(25569)  View

Related JVN