Vulnerability CVE-2013-4441: Information
Description
The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.
Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| pwgen | sisyphus | 2.08-alt1 | 2.08-alt1 | ALT-PU-2019-2538-1 | 236621 | Fixed |
| pwgen | p10 | 2.08-alt1 | 2.08-alt1 | ALT-PU-2019-2538-1 | 236621 | Fixed |
| pwgen | p9 | 2.08-alt1 | 2.08-alt1 | ALT-PU-2019-2552-1 | 236401 | Fixed |
| pwgen | c10f1 | 2.08-alt1 | 2.08-alt1 | ALT-PU-2019-2538-1 | 236621 | Fixed |
| pwgen | c9f2 | 2.08-alt1 | 2.08-alt1 | ALT-PU-2019-2552-1 | 236401 | Fixed |
| pwgen | p11 | 2.08-alt1 | 2.08-alt1 | ALT-PU-2019-2538-1 | 236621 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2013/10/16/15 |
|
| https://www.openwall.com/lists/oss-security/2012/01/22/6 |
|
| http://www.openwall.com/lists/oss-security/2013/06/06/1 |
|
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726578 |
|