CVE-2008-6792 - system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks

Back Back to CVE browser

MEDIUM

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks

Published May 7, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 1.10%

Description

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (6)

http://osvdb.org/50037
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/32566
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ubuntu.com/usn/usn-663-1
vendor-advisoryx_refsource_UBUNTUVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6752
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50435
vdb-entryx_refsource_XF
https://launchpad.net/bugs/287134
x_refsource_CONFIRM

Link	Providers	Tags
http://osvdb.org/50037		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/32566		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ubuntu.com/usn/usn-663-1		vendor-advisoryx_refsource_UBUNTUVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6752		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50435		vdb-entryx_refsource_XF
https://launchpad.net/bugs/287134		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 7, 2009

Updated Aug 7, 2024

Reserved May 7, 2009

Link CVE-2008-6792

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-6792

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 7, 2009

Updated Aug 7, 2024

Link EUVD-2008-6752

GitHub

No data