CVE-2013-6445 Weak cryptography in n/a
Weak DES-based password hashing in Red Hat MRG Management Console allows attackers to recover passwords via brute-force attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-6445?
CVE-2013-6445 is a medium-severity vulnerability in Redhat Enterprise Mrg, published on 30 Apr 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.
Weakness: CWE-310
Which versions are affected by CVE-2013-6445?
It affects 1 product.
Linux distribution packages (2)
cumin Red Hat:enterprise_mrg:2::el5 | All versions | 0:0.1.5796-2.el5_9 |
mrg-release Red Hat:enterprise_mrg:2::el5 | All versions | 0:2.5.0-1.el5 |
Products include Redhat Enterprise Mrg.
How do I fix CVE-2013-6445?
Apply the vendor's patch.
Is CVE-2013-6445 being exploited?
There is no known exploitation of CVE-2013-6445 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Mrg
Sources
Also known as GHSA-8v63-g483-vrxj, RHSA-2014:0441.