CVE-2008-6792

Description

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.

References

https://launchpad.net/bugs/287134

https://exchange.xforce.ibmcloud.com/vulnerabilities/50435

http://www.ubuntu.com/usn/usn-663-1

http://secunia.com/advisories/32566

http://osvdb.org/50037

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3