Skip to content
OpenAdvisories
Unscored CVE-2001-0967 EUVD-2001-0949GHSA-x56c-3wf3-rm6r

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes…

Published Feb 2, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.

References