Description

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

Remediation

References

CVE-2002-1657

Related Vulnerabilities

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.14)

OpenSSL Out-of-bounds Write Vulnerability (CVE-2016-2182)

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4940)

e107 Other Vulnerability (CVE-2004-2039)

MediaWiki CVE-2023-45374 Vulnerability (CVE-2023-45374)

Severity

Medium

Classification

CVE-2002-1657

Tags

Missing Update Known Vulnerabilities