CVE-2000-0492 PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.
MediumCVSS 5.0
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| passwd | = 1.2 | No fix listed |
References
- 20000609 Insecure encryption in PassWD v1.2 mailing-list patch vendor-advisory
- 1300 vdb-entry