Security Advisory
CVE-2012-3287
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack, as demonstrated by an attack using GPU hardware.