CVE-2008-4905

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.

Link	Resource
http://www.securityfocus.com/archive/1/497970
http://secunia.com/advisories/32272	Vendor Advisory
http://securityreason.com/securityalert/4550

Configuration 1

cpe:2.3:a:typosphere:typo:5.1:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.8:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.5:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:3.99.1:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.6.0:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:*:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:1.6:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.0:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.2:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.4:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:4.0.0:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.7:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:5.1.1:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:3.99.2:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:3.99.4:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.6:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:3.99.0:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:5.0.2:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:5.0.3.98.1:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:5.0.3.98:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:5.0.3:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:1.6.8:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.0.0:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:4.1.1:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.3:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:5.1.2:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:3.99.3:*:*:*:*:*:*:* cpe:2.3:a:typosphere:typo:2.5.1:*:*:*:*:*:*:*

---

Published : 2008-11-04 12:58

Updated : 2009-01-29 06:57

---

NVD link : CVE-2008-4905

Mitre link : CVE-2008-4905

No products.

CWE-916