Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-1058

Fixed in a distro release EPSS <1%

BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.

Published 2006-04-04 · CVE record · OSV

Products: busybox, avaya aura_application_enablement_services, avaya aura_sip_enablement_services, avaya message_networking, avaya messaging_storage_server

Distro releases

ReleasePackageFixed in
Debian 12busybox1:1.1.3-1
Debian 13busybox1:1.1.3-1
Debian 14busybox1:1.1.3-1
Red Hat Enterprise Linux 4busybox0:1.00.rc1-7.el4
Red Hat Enterprise Linux 4busybox-anaconda0:1.00.rc1-7.el4
Red Hat Enterprise Linux 4busybox-debuginfo0:1.00.rc1-7.el4