Red Hat Security AdvisoryRHSA-2007:0244
busybox security update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 busybox-1.00.rc1-7.el4, busybox-1.00.rc1-7.el4.i386, busybox-1.00.rc1-7.el4.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 busybox-1.00.rc1-7.el4, busybox-1.00.rc1-7.el4.i386, busybox-anaconda-1.00.rc1-7.el4 +1
- Red Hat Enterprise Linux ES version 4 busybox-1.00.rc1-7.el4, busybox-1.00.rc1-7.el4.i386, busybox-1.00.rc1-7.el4.ia64 +3
- Red Hat Enterprise Linux WS version 4 busybox-1.00.rc1-7.el4, busybox-1.00.rc1-7.el4.i386, busybox-1.00.rc1-7.el4.ia64 +3
Fixes 1 record
Priority LOW 25
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2006-04-04 · Fixed CWE-916
