CVE-2002-1657

CVE-2002-1657 affects PostgreSQL where the username is used as the salt when password hashing. This design choice can lower password strength and enable remote attackers to perform brute-force password guessing more easily, potentially compromising authentication. Available connected sources conf...

Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords

Greetings, There appears to be some deficiencies in both the documentation of the 'md5' authentication methology in pghba.conf and in the md5 hash generation which is stored in pgshadow. The md5 hash which is generated for and stored in pgshadow does not use a random salt but instead uses the...

PT-2002-2381 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue makes it easier for remote attackers to guess passwords via a brute force attack because PostgreSQL uses the username for a salt when generating passwords. Recommendations: At...

PT-2002-2696 · Sharp · Sharp Zaurus Pda

Name of the Vulnerable Software and Affected Versions: Sharp Zaurus PDA versions SL-5000D and SL-5500 Description: The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to gues...

CVE-2001-0967

Knox Arkeia server (notably version 4.2) uses a constant salt when hashing passwords via crypt(), enabling easier brute‑force guessing. The root cause is the non‑unique salt value in password encryption, which compromises password strength. The PT-2001-2119 advisory aligns with this, describing t...

CVE-2001-0967

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...

CVE-2001-0967

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...

PT-2001-2119 · Knox · Knox Arkeia Server

Name of the Vulnerable Software and Affected Versions: Knox Arkeia server version 4.2 Description: The issue is related to the use of a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing. Recommendations...

CVE-2024-33867

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt...