← Back

Solar Designer

solar_designer

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Crypt Blowfish
crypt_blowfish
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-0591
1Solar Designer
1Crypt Blowfish
Apr 16, 2026
Feb 8, 2006
N/A· v4
N/A· v3
1.2 LOW· v2
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attacke...Show more
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.Show less