Lucene search
Ubuntu.comUB:CVE-2012-3287HistoryJun 13, 2012 - 12:00 a.m.
CVE-2012-3287
2012-06-1300:00:00
ubuntu.com
ubuntu.com
14
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
49.8%
Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a
consequently short runtime, which makes it easier for context-dependent
attackers to discover cleartext passwords via a brute-force attack, as
demonstrated by an attack using GPU hardware.
Notes
| Author | Note |
|---|---|
| jdstrand | As of 8.10, Ubuntu has moved away from using MD5 in a security context. See https://wiki.ubuntu.com/Security/Features for details. |
Related
cvelist
cvelist
CVE-2012-3287
2012-06-13 00:00:00
cve
cve
CVE-2012-3287
2012-06-13 19:55:01
prion
prion
Design/Logic Flaw
2012-06-13 19:55:00
nvd
nvd
CVE-2012-3287
2012-06-13 19:55:01
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
49.8%
Related for UB:CVE-2012-3287