NVD

Id
59326  
Name
CVE-2006-0591  
Description
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-02-07  
Modified Date
2011-07-13  
Seq
2006-0591  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304997 59326 CVE-2006-0591 20060602-01-U  View
304998 59326 CVE-2006-0591 http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gensalt.c?only_with_tag=CRYPT_BLOWFISH_1_0  View
304999 59326 CVE-2006-0591 oval:org.mitre.oval:def:11502  View
305000 59326 CVE-2006-0591 http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm  View
305001 59326 CVE-2006-0591 RHSA-2006:0526  View
305002 59326 CVE-2006-0591 20060207 crypt_blowfish 1.0  View
305003 59326 CVE-2006-0591 ADV-2006-0477  View
305004 59326 CVE-2006-0591 cryptblowfish-salt-information-disclosure(24590)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57897 JVNDB-2006-000093 PostgreSQL の gen_salt() 関数におけるハッシュの推測が容易となる脆弱性 PostgreSQL に実装されるハッシュ化関数 gen_salt() には、MD5 および XDES アルゴリズムでパスワードをハッシュ化する際、ソルト生成においてソルト空間の半分しか使用しないため、本来の半分のサイズのソルトによりハッシュ化が行われてしまう脆弱性が存在します。 CVE-2006-0591 16693 CVE-2006-0591 59326 1.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000093.html 2006-02-08 2007-04-01 View