CVE-2001-1467
- State
- Published
- Severity
- Not scored
- Published
- Apr 21, 2005
- Updated
- Aug 8, 2024
- Reserved
- Apr 21, 2005
Description
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20010411 flaw in RH ``mkpasswd'' commandmailing-list
- mkpasswd-weak-passwords(6382)vdb-entry
- VU#527736third-party-advisory
- 1001303vdb-entry
- 2632vdb-entry
- 20010412 Re: flaw in RH ``mkpasswd'' command (importance of seeds & algorithms)mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.