OSVDB ID: 23005

Title: crypt_blowfish crypt_gensalt*() Functions Salt Generation Weakness

Info

Disclosure

Feb 07, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Cryptographic
Impact: Loss of Integrity

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

Secunia Advisory ID: 18772 20232 20653 20782
CVE ID: 2006-0591 (see also: NVD)
Other Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/crypt_gensalt.c?only_with_tag=CRYPT_BLOWFISH_1_0
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-02/0094.html
http://archives.neohapsis.com/archives/bugtraq/2006-02/0095.html
http://attrition.org/pipermail/vim/2006-February/000554.html
Vendor Specific Advisory URL: http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm
RedHat RHSA: RHSA-2006:0526

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/23005