CVE-2006-1058
Medium
Description
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
SeverityMedium
CVSS5.5
Exploit probability—
ProductBusybox
PublishedApr 4, 2006
First seenApr 4, 2006
How to fix
Update
- avaya aura_sip_enablement_services5.0 or later
- avaya messaging_storage_server4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| busybox busybox | 1.1.1 | — |
| avaya aura_application_enablement_services | 4.01, 4.1 | — |
| avaya aura_sip_enablement_services | v < 5.0 | 5.0 |
| avaya message_networking | No range specified | — |
| avaya messaging_storage_server | 3.0 ≤ v < 4.0 | 4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.