CVE-2000-0492
MediumExploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, allowing an attacker with access to the password file to easily decrypt the passwords.
Risk Assessment
Weak password encryption poses a significant security risk to the organization, as it allows unauthorized access to user accounts.
Recommendation
It is recommended to upgrade to a newer version of PassWD that employs stronger password encryption methods.
Other vulnerabilities in PassWD 1.2
See all- CVE-1999-1162Medium
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
- CVE-1999-1471High
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.
Original NVD description (English source)
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS