CVE-2012-3287

2012-06-1319:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

49.7%

JSON

Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack, as demonstrated by an attack using GPU hardware.

References

phk.freebsd.dk/sagas/md5crypt_eol.html

phk.freebsd.dk/sagas/md5crypt_eol/