CVE-2000-0093: Critical severity redhat Linux vulnerability
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure Red Hat installations to use MD5-based password encryption for initial passwords instead of DES/crypt(), ensuring initial passwords are created/stored using MD5 hashing.
Red Hat initial password encryption password hashing algorithm for initial password = md5
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0093?
CVE-2000-0093 has a moderate severity as it involves the use of weak DES password encryption in Red Hat Linux.
How do I fix CVE-2000-0093?
To fix CVE-2000-0093, upgrade the system to use stronger password encryption methods like MD5 instead of DES.
Which versions of Red Hat Linux are affected by CVE-2000-0093?
CVE-2000-0093 specifically affects Red Hat Linux version 6.1.
What type of encryption is vulnerable in CVE-2000-0093?
CVE-2000-0093 is vulnerable due to the use of the DES encryption algorithm for passwords.
Is there a workaround for CVE-2000-0093 if an upgrade is not possible?
A potential workaround for CVE-2000-0093 is to manually change the password encryption method to a stronger algorithm if supported.