Lucene search
MitreCVE-2004-2394HistoryAug 17, 2005 - 4:00 a.m.
CVE-2004-2394
2005-08-1704:00:00
mitre
web.nvd.nist.gov
27
cve-2004-2394
passwd
off-by-one error
brute force attacks
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
24.8%
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
Affected configurations
Node
mandrakesoftmandrake_multi_network_firewallMatch8.2
Node
mandrakesoftmandrake_linuxMatch8.2
ORmandrakesoftmandrake_linuxMatch8.2ppc
ORmandrakesoftmandrake_linuxMatch9.0
ORmandrakesoftmandrake_linuxMatch9.1
ORmandrakesoftmandrake_linuxMatch9.1ppc
ORmandrakesoftmandrake_linuxMatch9.2
ORmandrakesoftmandrake_linuxMatch9.2amd64
ORmandrakesoftmandrake_linuxMatch10.0
ORmandrakesoftmandrake_linux_corporate_serverMatch2.1
ORmandrakesoftmandrake_linux_corporate_serverMatch2.1x86_64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mandrakesoft | mandrake_multi_network_firewall | 8.2 | cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 8.2 | cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 8.2 | cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 9.0 | cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 9.1 | cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 9.1 | cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 9.2 | cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 9.2 | cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 10.0 | cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2004-2394
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-2394
2005-08-17 04:00:00
nessus
nessus
Mandrake Linux Security Advisory : passwd (MDKSA-2004:045)
2004-07-31 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
24.8%
Related for CVE-2004-2394