Filtered by vendor Solar Designer Subscriptions
Filtered by product Crypt Blowfish Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-0591 2 Redhat, Solar Designer 2 Enterprise Linux, Crypt Blowfish 2024-11-21 N/A
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.