CVE-2006-1058

Published: Apr 4, 2006Modified: Apr 16, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.

Affected (6)

Products: Busybox: Busybox · Avaya: Aura Application Enablement Services, Aura Sip Enablement Services, Message Networking, Messaging Storage Server

1 product

4 products

Aura Application Enablement Services

Aura Sip Enablement Services

Message Networking

Messaging Storage Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Busybox Busybox	Version 1.1.1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Avaya Aura Application Enablement Services	Version 4.01
Avaya Aura Application Enablement Services	Version 4.1
Avaya Aura Sip Enablement Services	Before 5.0
Avaya Message Networking	All versions
Avaya Messaging Storage Server	From 3.0 to 4.0

Related CWEs

Use of Password Hash With Insufficient Computational Effort

The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

References (18)

http://bugs.busybox.net/view.php?id=604

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/19477

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/25098

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/25848

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0244.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/17330

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/25569

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483

Source: secalert@redhat.com

Broken Link

http://bugs.busybox.net/view.php?id=604

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/19477

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

http://secunia.com/advisories/25098

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/25848

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0244.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/17330

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/25569

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.