2.1
CVE-2004-2394
- EPSS 0.36%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:34
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOff-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mandrakesoft ≫ Mandrake Multi Network Firewall Version8.2
Mandrakesoft ≫ Mandrake Linux Version8.2
Mandrakesoft ≫ Mandrake Linux Version8.2 Editionppc
Mandrakesoft ≫ Mandrake Linux Version9.0
Mandrakesoft ≫ Mandrake Linux Version9.1
Mandrakesoft ≫ Mandrake Linux Version9.1 Editionppc
Mandrakesoft ≫ Mandrake Linux Version9.2
Mandrakesoft ≫ Mandrake Linux Version9.2 Editionamd64
Mandrakesoft ≫ Mandrake Linux Version10.0
Mandrakesoft ≫ Mandrake Linux Corporate Server Version2.1
Mandrakesoft ≫ Mandrake Linux Corporate Server Version2.1 Editionx86_64
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.276 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:N
|
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060
http://www.mandriva.com/security/advisories?name=MDKSA-2004:045
http://www.securityfocus.com/bid/10370
https://exchange.xforce.ibmcloud.com/vulnerabilities/16178