CVE-2001-0967

Critical

Published: 31/08/2001(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

Knox Arkeia server version 4.2, and possibly other versions, uses a constant salt when encrypting passwords with the crypt() function, making it easier for attackers to conduct brute force password guessing.

Risk Assessment

The use of a constant salt increases the risk of successful password guessing by attackers, potentially leading to unauthorized access to the system.

Recommendation

It is recommended to update the Knox Arkeia server to the latest version that uses unique salts for each password to enhance security.

Original NVD description (English source)

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.