Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1229-1
Solution
Please Install the Updated Packages.
Insight
It was discovered that the blowfish algorithm in the pgcrypto module incorrectly handled certain 8-bit characters, resulting in the password hashes being easier to crack than expected. An attacker who could obtain the password hashes would be able to recover the plaintext with less effort.
Affected
postgresql-8.4 on Ubuntu 11.04 ,
Ubuntu 10.10 ,
Ubuntu 10.04 LTS ,
Ubuntu 8.04 LTS
Severity
Classification
-
CVE CVE-2011-2483 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities