Solar Designer Crypt Blowfish vulnerabilities

1 vulnerability

Known vulnerabilities in Solar Designer Crypt Blowfish, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

1.2CVE-2006-0591solar_designercrypt_blowfish
EPSS score
0.39%
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.