CVE-2006-1058
Fixed in a distro release EPSS <1%
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
Products: busybox, avaya aura_application_enablement_services, avaya aura_sip_enablement_services, avaya message_networking, avaya messaging_storage_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | busybox | 1:1.1.3-1 |
| Debian 13 | busybox | 1:1.1.3-1 |
| Debian 14 | busybox | 1:1.1.3-1 |
| Red Hat Enterprise Linux 4 | busybox | 0:1.00.rc1-7.el4 |
| Red Hat Enterprise Linux 4 | busybox-anaconda | 0:1.00.rc1-7.el4 |
| Red Hat Enterprise Linux 4 | busybox-debuginfo | 0:1.00.rc1-7.el4 |