NVD

Id
59780  
Name
CVE-2006-1058  
Description
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-04-04  
Modified Date
2010-08-21  
Seq
2006-1058  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307499 59780 CVE-2006-1058 http://bugs.busybox.net/view.php?id=604  View
307500 59780 CVE-2006-1058 oval:org.mitre.oval:def:9483  View
307501 59780 CVE-2006-1058 http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm  View
307502 59780 CVE-2006-1058 RHSA-2007:0244  View
307503 59780 CVE-2006-1058 17330  View
307504 59780 CVE-2006-1058 busybox-passwd-weak-security(25569)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58690 JVNDB-2006-000955 BusyBox の passwd における弱い暗号で MD5 パスワードハッシュが生成される問題 BusyBox の passwd コマンドには、MD5 ハッシュで暗号化されたパスワードを生成する際に、salt を使用しないでパスワードを暗号化してしまう問題が存在します。 CVE-2006-1058 17160 CVE-2006-1058 59780 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000955.html 2006-04-04 2007-05-23 View