CVE-2001-0967: Use of Password Hash With Insufficient Computational Effort

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...

PT-2001-2119 · Knox · Knox Arkeia Server

Name of the Vulnerable Software and Affected Versions: Knox Arkeia server version 4.2 Description: The issue is related to the use of a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing. Recommendations...

Network Solutions Crypt-PW Authentication-Scheme vulnerability

Problem: While crypt password authentication is not in and of itself very secure, Network Sulotions have made it even less so by including the first two characters of the password as the salt of the encrypted form. While the password is transmitted via a secure session, the encrypted form is...

Слабый алгоритм шифрования в Crypt-PW (weak encryption)

Шифрованный парль легко декодируется...

CVE-2000-0250: Undefined Security Weakness

The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...

Скомпромитирован crypt() в QNX

Для шифрования пароля используется обратимый алгоритм битового вращения, который позволяет восстановить исходный текстовй пароль...

qnx crypt comprimised

the crypt function for qnx turned out to a bit mixer, not a hash function. It's now possible to extract plaintext from the hashes. On a related note, all IOpeners running qnx use the same root password. Telnetd is running, and allows remote login as root. This is a huge security hole, as you can...

QSSL QNX 4.25 A - 'crypt()' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants, crypt3 is based on a variant of the DES encryption...

QSSL QNX 4.25 A - crypt() Local Privilege Escalation

QSSL QNX 4.25 A - crypt Local Privilege Escalation / source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants,...

CVE-2000-0093

The CVE-2000-0093 entry concerns Red Hat installations that use DES-encrypted passwords via crypt() for the initial password instead of MD5. Affected component is the initial password handling in Red Hat setups; root cause is the use of DES crypt() rather than a stronger hash. Documents explicitl...

CVE-2000-0093: Undefined Security Weakness

An installation of Red Hat uses DES password encryption with crypt for the initial password, instead of md5...

PT-2000-1082 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat affected versions not specified Description: The issue is related to the use of DES password encryption with crypt for the initial password in Red Hat installations, instead of using md5 encryption. Recommendations: At the moment, the...