2809 matches found
Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
Greetings, There appears to be some deficiencies in both the documentation of the 'md5' authentication methology in pghba.conf and in the md5 hash generation which is stored in pgshadow. The md5 hash which is generated for and stored in pgshadow does not use a random salt but instead uses the...
PT-2002-2696 · Sharp · Sharp Zaurus Pda
Name of the Vulnerable Software and Affected Versions: Sharp Zaurus PDA versions SL-5000D and SL-5500 Description: The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to gues...
PT-2002-2381 · Postgresql · Postgresql
Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue makes it easier for remote attackers to guess passwords via a brute force attack because PostgreSQL uses the username for a salt when generating passwords. Recommendations: At...
CVE-2001-0967
Knox Arkeia server (notably version 4.2) uses a constant salt when hashing passwords via crypt(), enabling easier brute‑force guessing. The root cause is the non‑unique salt value in password encryption, which compromises password strength. The PT-2001-2119 advisory aligns with this, describing t...
CVE-2001-0967
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...
CVE-2001-0967: Use of Password Hash With Insufficient Computational Effort
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...
CVE-2001-0967
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...
PT-2001-2119 · Knox · Knox Arkeia Server
Name of the Vulnerable Software and Affected Versions: Knox Arkeia server version 4.2 Description: The issue is related to the use of a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing. Recommendations...
