CVE-2000-0093
HighExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A Red Hat installation uses DES password encryption with crypt() for the initial password instead of md5.
Risk Assessment
Using DES for password encryption is less secure than md5, exposing the system to password cracking attacks.
Recommendation
It is recommended to update the system to use md5 or another stronger password encryption algorithm.
Other vulnerabilities in Red Hat
See all- CVE-2000-0219High
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
- CVE-1999-1491High
In Red Hat 2.1, the abuse.console tool uses relative pathnames to locate and execute the undrv program, allowing local users to execute arbitrary commands via a path pointing to a Trojan horse program.
Original NVD description (English source)
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.