CVE-2008-3188

High

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for…

mitre·CWE-327·Published 2008-07-22

CVSS

7.5

EPSS

0.01

KEV

Exploits

Vendor statements (2)

cve.orgen

199 chars

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords.

NVDes

221 chars

libxcrypt en SUSE openSUSE 11.0 usa el algoritmo DES cuando la configuración especifica el uso del algoritmo MD5, esto puede facilitar a los atacantes llevar a cabo ataques de fuerza bruta contra las contraseñas (hashed).

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N