~ubuntu-security/ubuntu-cve-tracker/master

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
PublicDate: 2006-04-04
Candidate: CVE-2006-1058
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1058
Description:
 BusyBox 1.1.1 does not use a salt when generating passwords, which makes it
 easier for local users to guess passwords from a stolen password file using
 techniques such as rainbow tables.
Ubuntu-Description:
Notes:
Bugs:
dapper_busybox: released (1.01-4ubuntu3)
edgy_busybox: not-affected
feisty_busybox: not-affected
devel_busybox: not-affected
upstream_busybox: