CVE-2008-3188: Weak Encryption
Published Jul 22, 2008
·Updated
libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords.
Affected Software
1 affected component
openSUSE openSUSE=11.0
Event History
Jul 22, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3188?
CVE-2008-3188 is considered a medium severity vulnerability due to its potential for enabling brute-force attacks on hashed passwords.
2
How do I fix CVE-2008-3188?
To fix CVE-2008-3188, update to a patched version of libxcrypt that does not incorrectly use the DES algorithm.
3
Which version of openSUSE is affected by CVE-2008-3188?
CVE-2008-3188 specifically affects openSUSE version 11.0.
4
What is the impact of not fixing CVE-2008-3188?
Not fixing CVE-2008-3188 could lead to compromised user accounts due to easier brute-force attacks against hashed passwords.
5
Is there a workaround for CVE-2008-3188?
There are no official workarounds for CVE-2008-3188; upgrading to a secure version is the recommended solution.