Beveiligingsadvies

CVE-2001-1467

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-04-21 04:00:00
Laatst bijgewerkt 2024-08-08 04:58:11
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.