CVE-2008-6792
Last modified
CVE-2008-6792 is a vulnerability of currently unknown severity. system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.. EPSS estimates a 1.10% chance of exploitation in the next 30 days.
Description
system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu | Linux | 8.10 |
References
- http://secunia.com/advisories/32566Vendor Advisory
- http://www.ubuntu.com/usn/usn-663-1Vendor Advisory
- http://secunia.com/advisories/32566Vendor Advisory
- http://www.ubuntu.com/usn/usn-663-1Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-6792?
How severe is CVE-2008-6792?
How do I fix CVE-2008-6792?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-6786Multiple directory traversal vulnerabilities in geekigeeki.p…
- CVE-2008-6787SQL injection vulnerability in administrator/index.php in Li…
- CVE-2008-6788SQL injection vulnerability in MindDezign Photo Gallery 2.2,…
- CVE-2008-6789SQL injection vulnerability in MindDezign Photo Gallery 2.2 …
- CVE-2008-6790The admin module in MindDezign Photo Gallery 2.2 allows remo…
- CVE-2008-6791PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause…
- CVE-2008-6793The get_file_type function in lib/file_content.php in DFLabs…
- CVE-2008-6794SQL injection vulnerability in directory.php in Scripts For …
- CVE-2008-6795SQL injection vulnerability in view_news.php in nicLOR Vibro…
- CVE-2008-6796SQL injection vulnerability in manager/login.php in Pre Proj…
- CVE-2008-6797The server in Mitel NuPoint Messenger R11 and R3 sends usern…
- CVE-2008-6798Multiple SQL injection vulnerabilities in login.php in Pre P…
Are you affected by CVE-2008-6792?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST