CVE-2008-6792: Medium severity ubuntu 22.04 lts vulnerability

Published May 7, 2009

Updated

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.

Affected Software

1 affected component

Ubuntu Linux=8.10

Event History

May 7, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-6792?

CVE-2008-6792 has a medium severity rating due to its ability to weaken password security.

How do I fix CVE-2008-6792?

To fix CVE-2008-6792, upgrade to system-tools-backends version 2.6.0-1ubuntu1.1 or later.

What systems are affected by CVE-2008-6792?

CVE-2008-6792 affects Ubuntu 8.10 running system-tools-backends versions prior to 2.6.0-1ubuntu1.1.

What type of attack can exploit CVE-2008-6792?

CVE-2008-6792 can be exploited by context-dependent attackers using brute force methods to crack passwords.

Why is CVE-2008-6792 a concern for Ubuntu 8.10 users?

CVE-2008-6792 is a concern for Ubuntu 8.10 users because it limits password lengths and employs weak encryption, making passwords easier to compromise.