Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
crypt_blowfish 信息泄露漏洞
Vulnerability Description
crypt_blowfish 0.4.7及之前版本中的crypt_gensalt功能(用于BSDI风格的扩展DES密码hashes和FreeBSD风格的MD5密码hashes)没有平均随机分布salt,从而由于增加的冲突数量,使得攻击者更容易根据窃取而来的密码文件猜出密码。
CVSS Information
N/A
Vulnerability Type
N/A