CVE-2012-2565

Summary

Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/53715
• http://www.kb.cert.org/vuls/id/MAPG-8R9LBY
• http://www.kb.cert.org/vuls/id/722963

References

• http://www.securityfocus.com/bid/53715
• http://www.kb.cert.org/vuls/id/MAPG-8R9LBY
• http://www.kb.cert.org/vuls/id/722963

• ←Previous
• Next→