CVE-2006-0584

Published: Feb 8, 2006Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings.

Affected (7)

Products: Peoplesoft: Peopletools

Peoplesoft

1 product

Peopletools

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Peoplesoft Peopletools	Version 8.40
Peoplesoft Peopletools	Version 8.41
Peoplesoft Peopletools	Version 8.42
Peoplesoft Peopletools	Version 8.43
Peoplesoft Peopletools	Version 8.45.5
Peoplesoft Peopletools	Version 8.46.3
Peoplesoft Peopletools	Version 8.4

References (6)

http://www.osvdb.org/22952

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/424086/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16507

Source: cve@mitre.org

http://www.osvdb.org/22952

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/424086/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16507

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.