Unscored CVE-2008-3188 EUVD-2008-3178GHSA-pvvp-x5gj-xmcr

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attack…

Published Jul 22, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords.

References

opensuse-libxcrypt-weak-security(43927) vdb-entry
SUSE-SA:2008:036 vendor-advisory
SUSE-SR:2008:016 vendor-advisory
30301 vdb-entry
31096 third-party-advisory
31339 third-party-advisory