Skip to content
OpenAdvisories
Unscored CVE-2010-2967 EUVD-2010-2971GHSA-6f67-xh36-3q73

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible p…

Published Aug 4, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.

References