CVE-2013-6445
Fixed in a distro release EPSS 1%
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.
Products: redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 2 | cumin | 0:0.1.5796-2.el5_9 |
| Red Hat enterprise mrg 2 | mrg-release | 0:2.5.0-1.el5 |
| Red Hat enterprise mrg 2 computenode el6 | condor | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-classads | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-debuginfo | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-kbdd | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-qmf | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-vm-gahp | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | mrg-release | 0:2.5.0-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-aviary | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-classads | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-cluster-resource-agent | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-debuginfo | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-deltacloud-gahp | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-kbdd | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-plumage | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-qmf | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-vm-gahp | 0:7.8.10-0.1.el6 |
| Red Hat enterprise mrg 2 server el6 | cumin | 0:0.1.5797-1.el6 |
| Red Hat enterprise mrg 2 server el6 | mongodb | 0:1.6.4-7.el6 |
| Red Hat enterprise mrg 2 server el6 | mongodb-debuginfo | 0:1.6.4-7.el6 |
| Red Hat enterprise mrg 2 server el6 | mongodb-server | 0:1.6.4-7.el6 |
| Red Hat enterprise mrg 2 server el6 | mrg-release | 0:2.5.0-1.el6 |