Lucene search
+L

47 matches found

osv_cve
osv_cve
•added 2017/12/27 5:08 p.m.•26 views

CVE-2017-17878

An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES aka the CONFIGFEATUREDEFAULTPASSWDALGO="des" setting...

9.8CVSS5.8AI score0.016EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2017/12/27 5:08 p.m.•15 views

CVE-2017-17878

An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES aka the CONFIGFEATUREDEFAULTPASSWDALGO="des" setting...

10CVSS5.5AI score0.016EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/27 12:00 a.m.•6 views

CVE-2017-17878: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES aka the CONFIGFEATUREDEFAULTPASSWDALGO="des" setting...

10CVSS8.2AI score0.016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/05 12:00 a.m.•8 views

PT-2017-3509

Name of the Vulnerable Software and Affected Versions Valve Steam Link build 643 Description The issue is related to the use of the DES cryptographic protocol, which truncates root passwords longer than 8 characters. This could allow a remote attacker to gain access to the device with root...

10CVSS0.016EPSS
SaveExploits0References6
Exploit DB
Exploit DB
•added 2014/09/16 12:00 a.m.•41 views

Laravel - 'Hash::make()' Password Truncation Security

source: https://www.securityfocus.com/bid/69849/info Laravel is prone to a security weakness due to pseudo password hash collision. Attackers can exploit this issue to bypass intended security restrictions. This may aid in further attacks. // user input password $input = strrepeat'A',72; //...

5.3AI score
SaveExploits0
PostrgeSql
PostrgeSql
•added 2012/07/05 2:00 p.m.•623 views

Vulnerability in contrib module (CVE-2012-2143)

Passwords containing the byte 0x80 passed to the crypt function in pgcrypto are incorrectly truncated if DES encryption was used...

4.3CVSS6.9AI score0.05734EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2004/12/31 5:00 a.m.•33 views

CVE-2004-2394

Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks...

2.1CVSS6.7AI score0.0036EPSS
SaveExploits0References4
Rows per page
Query Builder