CVE
- Id
- 2070
- CVE No.
- CVE-2000-0492
- Status
- Candidate
- Description
- PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.
- Phase
- Proposed (20000712)
- Votes
- ACCEPT(1) Levy | MODIFY(2) Frech, Ozancin | NOOP(2) LeBlanc, Wall
- Comments
- Ozancin> change "attacker who can read the password" to "attacker to decrypt and read | the password" | Frech> XF:passwd-weak-encryption(4596)