Back to search
CVE-2001-1467
Published: Apr 21, 2005
Modified: Aug 8, 2024
PUBLISHED
Description
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20010411 flaw in RH ``mkpasswd'' command
mailing-list
x_refsource_BUGTRAQ
mkpasswd-weak-passwords(6382)
vdb-entry
x_refsource_XF
VU#527736
third-party-advisory
x_refsource_CERT-VN
1001303
vdb-entry
x_refsource_SECTRACK
2632
vdb-entry
x_refsource_BID
20010412 Re: flaw in RH ``mkpasswd'' command (importance of seeds & algorithms)
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now